[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <20151102.224739.1048362049247992500.davem@davemloft.net>
Date: Mon, 02 Nov 2015 22:47:39 -0500 (EST)
From: David Miller <davem@...emloft.net>
To: eric.dumazet@...il.com
Cc: netdev@...r.kernel.org, brouer@...hat.com, dvyukov@...gle.com,
hannes@...essinduktion.org
Subject: Re: [PATCH net-next] net: fix percpu memory leaks
From: Eric Dumazet <eric.dumazet@...il.com>
Date: Mon, 02 Nov 2015 09:03:11 -0800
> From: Eric Dumazet <edumazet@...gle.com>
>
> This patch fixes following problems :
>
> 1) percpu_counter_init() can return an error, therefore
> init_frag_mem_limit() must propagate this error so that
> inet_frags_init_net() can do the same up to its callers.
>
> 2) If ip[46]_frags_ns_ctl_register() fail, we must unwind
> properly and free the percpu_counter.
>
> Without this fix, we leave freed object in percpu_counters
> global list (if CONFIG_HOTPLUG_CPU) leading to crashes.
>
> This bug was detected by KASAN and syzkaller tool
> (http://github.com/google/syzkaller)
>
> Fixes: 6d7b857d541e ("net: use lib/percpu_counter API for fragmentation mem accounting")
> Signed-off-by: Eric Dumazet <edumazet@...gle.com>
> Reported-by: Dmitry Vyukov <dvyukov@...gle.com>
Applied.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists