netdev - Re: [Linux-kernel-mentees] [PATCH net v2] tipc: Fix memory leak in tipc_group_create

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20200914.163706.1002264196277641638.davem@davemloft.net>
Date:   Mon, 14 Sep 2020 16:37:06 -0700 (PDT)
From:   David Miller <davem@...emloft.net>
To:     yepeilin.cs@...il.com
Cc:     jmaloy@...hat.com, ying.xue@...driver.com, kuba@...nel.org,
        hdanton@...a.com, gregkh@...uxfoundation.org,
        netdev@...r.kernel.org, tipc-discussion@...ts.sourceforge.net,
        linux-kernel-mentees@...ts.linuxfoundation.org,
        syzkaller-bugs@...glegroups.com, linux-kernel@...r.kernel.org
Subject: Re: [Linux-kernel-mentees] [PATCH net v2] tipc: Fix memory leak in
 tipc_group_create_member()

From: Peilin Ye <yepeilin.cs@...il.com>
Date: Sun, 13 Sep 2020 04:06:05 -0400

> tipc_group_add_to_tree() returns silently if `key` matches `nkey` of an
> existing node, causing tipc_group_create_member() to leak memory. Let
> tipc_group_add_to_tree() return an error in such a case, so that
> tipc_group_create_member() can handle it properly.
> 
> Fixes: 75da2163dbb6 ("tipc: introduce communication groups")
> Reported-and-tested-by: syzbot+f95d90c454864b3b5bc9@...kaller.appspotmail.com
> Cc: Hillf Danton <hdanton@...a.com>
> Link: https://syzkaller.appspot.com/bug?id=048390604fe1b60df34150265479202f10e13aff
> Signed-off-by: Peilin Ye <yepeilin.cs@...il.com>
> ---
> Change in v2:
>     - let tipc_group_add_to_tree() return a real error code instead of -1.
>       (Suggested by David Miller <davem@...emloft.net>)

Applied and queued up for -stable, thank you.