On Mon, Nov 2, 2015, at 18:03, Eric Dumazet wrote: > From: Eric Dumazet <[email protected]> > > This patch fixes following problems : > > 1) percpu_counter_init() can return an error, therefore > init_frag_mem_limit() must propagate this error so that > inet_frags_init_net() can do the same up to its callers. > > 2) If ip[46]_frags_ns_ctl_register() fail, we must unwind > properly and free the percpu_counter. > > Without this fix, we leave freed object in percpu_counters > global list (if CONFIG_HOTPLUG_CPU) leading to crashes. > > This bug was detected by KASAN and syzkaller tool > (http://github.com/google/syzkaller) > > Fixes: 6d7b857d541e ("net: use lib/percpu_counter API for fragmentation > mem accounting") > Signed-off-by: Eric Dumazet <[email protected]> > Reported-by: Dmitry Vyukov <[email protected]> > Cc: Hannes Frederic Sowa <[email protected]> > Cc: Jesper Dangaard Brouer <[email protected]>
Acked-by: Hannes Frederic Sowa <[email protected]> Syzkaller tool looks amazing, seems like it got support for unshare :). Thanks! -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
