Re: [PATCH] net: ipconfig: fix use after free

2016-08-10 Thread David Miller
From: Geert Uytterhoeven Date: Wed, 10 Aug 2016 12:00:35 +0200 > Hi Uwe, > > On Wed, Aug 10, 2016 at 11:44 AM, Uwe Kleine-König > wrote: >> ic_close_devs() calls kfree() for all devices's ic_device. Since commit >> 2647cffb2bc6 ("net: ipconfig: Support using "delayed" DHCP replies") >> the acti

Re: [PATCH] net: ipconfig: fix use after free

2016-08-10 Thread Geert Uytterhoeven
Hi Uwe, On Wed, Aug 10, 2016 at 11:44 AM, Uwe Kleine-König wrote: > ic_close_devs() calls kfree() for all devices's ic_device. Since commit > 2647cffb2bc6 ("net: ipconfig: Support using "delayed" DHCP replies") > the active device's ic_device is still used however to print the > ipconfig summary

[PATCH] net: ipconfig: fix use after free

2016-08-10 Thread Uwe Kleine-König
ic_close_devs() calls kfree() for all devices's ic_device. Since commit 2647cffb2bc6 ("net: ipconfig: Support using "delayed" DHCP replies") the active device's ic_device is still used however to print the ipconfig summary which results in an oops if the memory is already changed. So delay freeing