Messages in this thread |  | | From | Chenyuan Yang <> | | Date | Mon, 22 Jan 2024 21:53:14 -0600 | | Subject | [Linux Kernel Bug] memory leak in ubi_attach |
| |
Dear Linux Kernel Developers for UBI,
We encountered "memory leak in ubi_attach" when testing UBI with Syzkaller and our generated specifications.
syz repro: https://drive.google.com/file/d/17FoGw6akfufz05U-oRBP2wXmOiFF1VUq/view?usp=drive_link C reproducer: https://drive.google.com/file/d/1ayd3lmHPvqNoI01pQEdU832EktpTUnZ_/view?usp=drive_link report: https://drive.google.com/file/d/1hC2arY3FbQt-6L5rbDfY-DQ2oH82IIGq/view?usp=drive_link stats: https://drive.google.com/file/d/1REig9fV0H1fYPWaiicc-JVLlCpo7TTw4/view?usp=drive_link
This memory leak is triggered by `ioctl$UBI_IOCATT`, where `ubi_attach_info` invokes `kmem_cache_create` (https://elixir.bootlin.com/linux/v6.7/source/drivers/mtd/ubi/attach.c#L1464). It seems that the memory leak occurs when the slab cache is successfully created. I apologize for not being able to conduct a deeper analysis of the root cause, as my expertise in UBI drivers is limited.
If you have any questions or require more information, please feel free to contact us.
Reported-by: Chenyuan Yang <chenyuan0y@gmail.com>
Best, Chenyuan [unhandled content-type:application/octet-stream][unhandled content-type:application/octet-stream] |  |