Messages in this thread | | | Subject | Re: [PATCH] atm: idt77252: fix use-after-free bugs caused by tst_timer | From | patchwork-bot+netdevbpf@kernel ... | Date | Tue, 09 Aug 2022 04:00:14 +0000 |
| |
Hello:
This patch was applied to netdev/net.git (master) by Jakub Kicinski <kuba@kernel.org>:
On Fri, 5 Aug 2022 15:00:08 +0800 you wrote: > There are use-after-free bugs caused by tst_timer. The root cause > is that there are no functions to stop tst_timer in idt77252_exit(). > One of the possible race conditions is shown below: > > (thread 1) | (thread 2) > | idt77252_init_one > | init_card > | fill_tst > | mod_timer(&card->tst_timer, ...) > idt77252_exit | (wait a time) > | tst_timer > | > | ... > kfree(card) // FREE | > | card->soft_tst[e] // USE > > [...]
Here is the summary with links: - atm: idt77252: fix use-after-free bugs caused by tst_timer https://git.kernel.org/netdev/net/c/3f4093e2bf46
You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
| |