Mao Wenan
07f12b26e2
net: sit: fix memory leak in sit_init_net()
If register_netdev() is failed to register sitn->fb_tunnel_dev,
it will go to err_reg_dev and forget to free netdev(sitn->fb_tunnel_dev).
BUG: memory leak
unreferenced object 0xffff888378daad00 (size 512):
comm "syz-executor.1", pid 4006, jiffies 4295121142 (age 16.115s)
hex dump (first 32 bytes):
00 e6 ed c0 83 88 ff ff 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<00000000d6dcb63e>] kvmalloc include/linux/mm.h:577 [inline]
[<00000000d6dcb63e>] kvzalloc include/linux/mm.h:585 [inline]
[<00000000d6dcb63e>] netif_alloc_netdev_queues net/core/dev.c:8380 [inline]
[<00000000d6dcb63e>] alloc_netdev_mqs+0x600/0xcc0 net/core/dev.c:8970
[<00000000867e172f>] sit_init_net+0x295/0xa40 net/ipv6/sit.c:1848
[<00000000871019fa>] ops_init+0xad/0x3e0 net/core/net_namespace.c:129
[<00000000319507f6>] setup_net+0x2ba/0x690 net/core/net_namespace.c:314
[<0000000087db4f96>] copy_net_ns+0x1dc/0x330 net/core/net_namespace.c:437
[<0000000057efc651>] create_new_namespaces+0x382/0x730 kernel/nsproxy.c:107
[<00000000676f83de>] copy_namespaces+0x2ed/0x3d0 kernel/nsproxy.c:165
[<0000000030b74bac>] copy_process.part.27+0x231e/0x6db0 kernel/fork.c:1919
[<00000000fff78746>] copy_process kernel/fork.c:1713 [inline]
[<00000000fff78746>] _do_fork+0x1bc/0xe90 kernel/fork.c:2224
[<000000001c2e0d1c>] do_syscall_64+0xc8/0x580 arch/x86/entry/common.c:290
[<00000000ec48bd44>] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[<0000000039acff8a>] 0xffffffffffffffff
Signed-off-by: Mao Wenan <maowenan@huawei.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
|
2019-03-02 00:53:23 -08:00 |
| .. |
|
6lowpan
|
|
|
|
9p
|
9p/net: put a lower bound on msize
|
2018-12-25 17:07:49 +09:00 |
|
802
|
|
|
|
8021q
|
|
|
|
appletalk
|
|
|
|
atm
|
|
|
|
ax25
|
ax25: fix possible use-after-free
|
2019-01-23 11:18:00 -08:00 |
|
batman-adv
|
batman-adv: fix uninit-value in batadv_interface_tx()
|
2019-02-12 13:30:43 -05:00 |
|
bluetooth
|
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
|
2018-12-27 13:53:32 -08:00 |
|
bpf
|
bpf/test_run: fix unkillable BPF_PROG_TEST_RUN
|
2019-02-19 00:17:03 +01:00 |
|
bpfilter
|
net: bpfilter: change section name of bpfilter UMH blob.
|
2019-01-16 15:46:46 -08:00 |
|
bridge
|
Revert "bridge: do not add port to router list when receives query with source 0.0.0.0"
|
2019-02-23 18:36:06 -08:00 |
|
caif
|
|
|
|
can
|
can: bcm: check timer values before ktime conversion
|
2019-01-22 11:33:46 +01:00 |
|
ceph
|
libceph: handle an empty authorize reply
|
2019-02-18 18:05:33 +01:00 |
|
core
|
net: Do not allocate page fragments that are not skb aligned
|
2019-02-17 15:48:43 -08:00 |
|
dcb
|
|
|
|
dccp
|
dccp: fool proof ccid_hc_[rt]x_parse_options()
|
2019-02-01 14:49:10 -08:00 |
|
decnet
|
decnet: fix DN_IFREQ_SIZE
|
2019-01-27 23:11:55 -08:00 |
|
dns_resolver
|
|
|
|
dsa
|
net: dsa: fix a leaked reference by adding missing of_node_put
|
2019-02-25 09:34:52 -08:00 |
|
ethernet
|
|
|
|
hsr
|
|
|
|
ieee802154
|
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
|
2018-12-24 16:19:56 -08:00 |
|
ife
|
|
|
|
ipv4
|
ipv4: Add ICMPv6 support when parse route ipproto
|
2019-03-01 16:41:27 -08:00 |
|
ipv6
|
net: sit: fix memory leak in sit_init_net()
|
2019-03-02 00:53:23 -08:00 |
|
iucv
|
|
|
|
kcm
|
|
|
|
key
|
af_key: unconditionally clone on broadcast
|
2019-02-12 10:36:42 +01:00 |
|
l2tp
|
l2tp: copy 4 more bytes to linear part if necessary
|
2019-01-31 08:58:46 -08:00 |
|
l3mdev
|
|
|
|
lapb
|
|
|
|
llc
|
|
|
|
mac80211
|
mac80211: allocate tailroom for forwarded mesh packets
|
2019-02-22 14:00:40 +01:00 |
|
mac802154
|
|
|
|
mpls
|
mpls: Return error for RTA_GATEWAY attribute
|
2019-02-26 13:23:17 -08:00 |
|
ncsi
|
|
|
|
netfilter
|
ipvs: fix warning on unused variable
|
2019-02-16 10:41:42 +01:00 |
|
netlabel
|
netlabel: fix out-of-bounds memory accesses
|
2019-02-27 21:45:24 -08:00 |
|
netlink
|
|
|
|
netrom
|
netrom: switch to sock timer API
|
2019-01-27 10:38:04 -08:00 |
|
nfc
|
net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
|
2019-02-27 12:47:08 -08:00 |
|
nsh
|
|
|
|
openvswitch
|
openvswitch: Avoid OOB read when parsing flow nlattrs
|
2019-01-16 13:35:21 -08:00 |
|
packet
|
net/packet: fix 4gb buffer limit due to overflow check
|
2019-02-12 13:37:23 -05:00 |
|
phonet
|
phonet: fix building with clang
|
2019-02-21 16:23:56 -08:00 |
|
psample
|
|
|
|
qrtr
|
|
|
|
rds
|
rds: fix refcount bug in rds_sock_addref
|
2019-01-31 09:43:27 -08:00 |
|
rfkill
|
|
|
|
rose
|
net/rose: fix NULL ax25_cb kernel panic
|
2019-01-27 10:40:01 -08:00 |
|
rxrpc
|
rxrpc: bad unlock balance in rxrpc_recvmsg
|
2019-02-06 10:54:07 -08:00 |
|
sched
|
net: netem: fix skb length BUG_ON in __skb_to_sgvec
|
2019-02-28 10:31:31 -08:00 |
|
sctp
|
sctp: chunk.c: correct format string for size_t in printk
|
2019-02-28 10:33:40 -08:00 |
|
smc
|
net/smc: fix smc_poll in SMC_INIT state
|
2019-02-21 10:19:20 -08:00 |
|
strparser
|
|
|
|
sunrpc
|
Two small fixes, one for crashes using nfs/krb5 with older enctypes, one
|
2019-02-16 17:38:01 -08:00 |
|
switchdev
|
|
|
|
tipc
|
tipc: fix race condition causing hung sendto
|
2019-02-26 14:50:50 -08:00 |
|
tls
|
net: tls: Fix deadlock in free_resources tx
|
2019-01-28 23:07:08 -08:00 |
|
unix
|
missing barriers in some of unix_sock ->addr and ->path accesses
|
2019-02-20 20:06:28 -08:00 |
|
vmw_vsock
|
vsock: cope with memory allocation failure at socket creation time
|
2019-02-08 22:32:05 -08:00 |
|
wimax
|
|
|
|
wireless
|
cfg80211: prevent speculation on cfg80211_classify8021d() return
|
2019-02-11 15:50:56 +01:00 |
|
x25
|
net/x25: fix a race in x25_bind()
|
2019-02-23 18:41:06 -08:00 |
|
xdp
|
Revert "xsk: simplify AF_XDP socket teardown"
|
2019-02-21 16:32:25 +01:00 |
|
xfrm
|
xfrm: Fix inbound traffic via XFRM interfaces across network namespaces
|
2019-02-18 10:58:54 +01:00 |
|
compat.c
|
net: socket: add check for negative optlen in compat setsockopt
|
2019-02-22 11:49:28 -08:00 |
|
Kconfig
|
net: convert bridge_nf to use skb extension infrastructure
|
2018-12-19 11:21:37 -08:00 |
|
Makefile
|
|
|
|
socket.c
|
net: socket: set sock->sk to NULL after calling proto_ops::release()
|
2019-02-25 10:40:57 -08:00 |
|
sysctl_net.c
|
|
|