Thread (31 messages) 31 messages, 7 authors, 2024-10-16

Re: [PATCH net-next v3 6/9] net: inet: do not leave a dangling sk pointer in inet_create()

flat view

From: Kuniyuki Iwashima <hidden>
Date: 2024-10-14 21:37:20
Also in: linux-bluetooth, linux-can, lkml

From: Ignat Korchagin <redacted>
Date: Mon, 14 Oct 2024 16:38:05 +0100
sock_init_data() attaches the allocated sk object to the provided sock
object. If inet_create() fails later, the sk object is freed, but the
sock object retains the dangling pointer, which may create use-after-free
later.

Clear the sk pointer in the sock object on error.

Signed-off-by: Ignat Korchagin <redacted>
Reviewed-by: Kuniyuki Iwashima <redacted>
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help