Messages in this thread | | | Subject | Re: [PATCH v2 1/1] net/sched: cls_u32: Fix reference counter leak leading to overflow | From | patchwork-bot+netdevbpf@kernel ... | Date | Fri, 09 Jun 2023 10:50:22 +0000 |
| |
Hello:
This patch was applied to netdev/net.git (main) by David S. Miller <davem@davemloft.net>:
On Thu, 8 Jun 2023 08:29:03 +0100 you wrote: > In the event of a failure in tcf_change_indev(), u32_set_parms() will > immediately return without decrementing the recently incremented > reference counter. If this happens enough times, the counter will > rollover and the reference freed, leading to a double free which can be > used to do 'bad things'. > > In order to prevent this, move the point of possible failure above the > point where the reference counter is incremented. Also save any > meaningful return values to be applied to the return data at the > appropriate point in time. > > [...]
Here is the summary with links: - [v2,1/1] net/sched: cls_u32: Fix reference counter leak leading to overflow https://git.kernel.org/netdev/net/c/04c55383fa56
You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
| |