[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <1446489123.3078652.426995233.777A4A93@webmail.messagingengine.com>
Date: Mon, 02 Nov 2015 19:32:03 +0100
From: Hannes Frederic Sowa <hannes@...essinduktion.org>
To: Eric Dumazet <eric.dumazet@...il.com>,
David Miller <davem@...emloft.net>
Cc: netdev <netdev@...r.kernel.org>,
Jesper Dangaard Brouer <brouer@...hat.com>,
Dmitry Vyukov <dvyukov@...gle.com>
Subject: Re: [PATCH net-next] net: fix percpu memory leaks
On Mon, Nov 2, 2015, at 18:03, Eric Dumazet wrote:
> From: Eric Dumazet <edumazet@...gle.com>
>
> This patch fixes following problems :
>
> 1) percpu_counter_init() can return an error, therefore
> init_frag_mem_limit() must propagate this error so that
> inet_frags_init_net() can do the same up to its callers.
>
> 2) If ip[46]_frags_ns_ctl_register() fail, we must unwind
> properly and free the percpu_counter.
>
> Without this fix, we leave freed object in percpu_counters
> global list (if CONFIG_HOTPLUG_CPU) leading to crashes.
>
> This bug was detected by KASAN and syzkaller tool
> (http://github.com/google/syzkaller)
>
> Fixes: 6d7b857d541e ("net: use lib/percpu_counter API for fragmentation
> mem accounting")
> Signed-off-by: Eric Dumazet <edumazet@...gle.com>
> Reported-by: Dmitry Vyukov <dvyukov@...gle.com>
> Cc: Hannes Frederic Sowa <hannes@...essinduktion.org>
> Cc: Jesper Dangaard Brouer <brouer@...hat.com>
Acked-by: Hannes Frederic Sowa <hannes@...essinduktion.org>
Syzkaller tool looks amazing, seems like it got support for unshare :).
Thanks!
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists