Re: [PATCH net] bpf: devmap: fix use-after-free Read in __dev_map_entry_free

2019-05-13 Thread Daniel Borkmann
On 05/13/2019 06:59 PM, Eric Dumazet wrote: > synchronize_rcu() is fine when the rcu callbacks only need > to free memory (kfree_rcu() or direct kfree() call rcu call backs) > > __dev_map_entry_free() is a bit more complex, so we need to make > sure that call queued __dev_map_entry_free() callback

[PATCH net] bpf: devmap: fix use-after-free Read in __dev_map_entry_free

2019-05-13 Thread Eric Dumazet
synchronize_rcu() is fine when the rcu callbacks only need to free memory (kfree_rcu() or direct kfree() call rcu call backs) __dev_map_entry_free() is a bit more complex, so we need to make sure that call queued __dev_map_entry_free() callbacks have completed. sysbot report: BUG: KASAN: use-aft