Cong Wang
18717ee28e
tun: fix a memory leak for tfile->tx_array
...
[ Upstream commit 4df0bfc79904b7169dc77dcce44598b1545721f9 ]
tfile->tun could be detached before we close the tun fd,
via tun_detach_all(), so it should not be used to check for
tfile->tx_array.
As Jason suggested, we probably have to clean it up
unconditionally both in __tun_deatch() and tun_detach_all(),
but this requires to check if it is initialized or not.
Currently skb_array_cleanup() doesn't have such a check,
so I check it in the caller and introduce a helper function,
it is a bit ugly but we can always improve it in net-next.
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Fixes: 1576d98605 ("tun: switch to use skb array for tx")
Cc: Jason Wang <jasowang@redhat.com>
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-01-31 12:55:56 +01:00
..
accessibility
acpi
ACPICA: Namespace: fix operand cache leak
2018-01-31 12:55:52 +01:00
amba
android
ANDROID: binder: fix proc->tsk check.
2017-08-30 10:21:53 +02:00
ata
libata: apply MAX_SEC_1024 to all LITEON EP1 series devices
2018-01-23 19:57:08 +01:00
atm
atm: horizon: Fix irq release error
2017-12-14 09:28:24 +01:00
auxdisplay
auxdisplay: img-ascii-lcd: add missing sentinel entry in img_ascii_lcd_matches
2017-03-30 09:41:27 +02:00
base
drivers: base: cacheinfo: fix boot error message when acpi is enabled
2018-01-31 12:55:51 +01:00
bcma
bcma: use (get|put)_device when probing/removing device driver
2017-03-12 06:41:52 +01:00
block
rbd: set max_segments to USHRT_MAX
2018-01-17 09:38:54 +01:00
bluetooth
Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
2017-12-25 14:23:46 +01:00
bus
sunxi-rsb: Include OF based modalias in device uevent
2018-01-10 09:29:52 +01:00
cdrom
char
ipmi: Stop timers before cleaning up the module
2017-12-16 16:25:46 +01:00
clk
clk: sunxi: sun9i-mmc: Implement reset callback for reset controls
2017-12-29 17:43:00 +01:00
clocksource
clockevents/drivers/cs5535: Improve resilience to spurious interrupts
2017-10-27 10:38:08 +02:00
connector
cpufreq
cpufreq: Fix creation of symbolic links to policy directories
2017-12-25 14:23:42 +01:00
cpuidle
cpuidle: fix broadcast control when broadcast can not be entered
2017-12-25 14:23:46 +01:00
crypto
crypto: n2 - cure use after free
2018-01-10 09:29:51 +01:00
dax
device-dax: fix sysfs duplicate warnings
2017-08-06 18:59:43 -07:00
dca
devfreq
PM / devfreq: Fix memory leak when fail to register device
2017-09-27 14:39:24 +02:00
dio
dma
dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type
2017-12-20 10:07:27 +01:00
dma-buf
dma-buf: Update kerneldoc for sync_file_create
2017-12-09 22:01:56 +01:00
edac
EDAC, i5000, i5400: Fix definition of NRECMEMB register
2017-12-14 09:28:22 +01:00
eisa
extcon
extcon: palmas: Check the parent instance to prevent the NULL
2017-11-21 09:23:21 +01:00
firewire
firmware
efi/esrt: Cleanup bad memory map log messages
2017-12-20 10:07:26 +01:00
fmc
fpga
gpio
gpio: altera: Use handle_level_irq when configured as a level_high
2017-12-14 09:28:18 +01:00
gpu
drm/vmwgfx: Potential off by one in vmw_view_add()
2018-01-17 09:38:54 +01:00
hid
HID: xinmo: fix for out of range for THT 2P arcade controller.
2017-12-25 14:23:40 +01:00
hsi
hv
x86/retpoline/hyperv: Convert assembler indirect jumps
2018-01-17 09:38:59 +01:00
hwmon
hwmon: (asus_atk0110) fix uninitialized data access
2017-12-25 14:23:40 +01:00
hwspinlock
hwtracing
intel_th: pci: Add Gemini Lake support
2017-12-20 10:07:22 +01:00
i2c
i2c: riic: fix restart condition
2017-12-14 09:28:21 +01:00
ide
idle
x86/intel_idle: Add CPU model 0x4a (Atom Z34xx series)
2017-04-12 12:41:17 +02:00
iio
iio: adc: ti-ads1015: add 10% to conversion wait time
2017-12-09 22:01:49 +01:00
infiniband
iser-target: Fix possible use-after-free in connection establishment error
2018-01-23 19:57:05 +01:00
input
Input: trackpoint - force 3 buttons if 0 button is reported
2018-01-31 12:55:53 +01:00
iommu
iommu/arm-smmu-v3: Cope with duplicated Stream IDs
2018-01-10 09:29:53 +01:00
ipack
irqchip
irqchip/mvebu-odmi: Select GENERIC_MSI_IRQ_DOMAIN
2017-12-20 10:07:21 +01:00
isdn
isdn: kcapi: avoid uninitialized data
2017-12-25 14:23:42 +01:00
leds
Revert "leds: handle suspend/resume in heartbeat trigger"
2017-08-30 10:21:51 +02:00
lguest
lightnvm
macintosh
mailbox
mailbox: handle empty message in tx_tick
2017-08-06 18:59:42 -07:00
mcb
MCB: add support for SC31 to mcb-lpc
2017-09-09 17:39:41 +02:00
md
dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6
2018-01-23 19:57:09 +01:00
media
lirc: fix dead lock between open and wakeup_filter
2017-12-14 09:28:17 +01:00
memory
ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure
2017-12-14 09:28:16 +01:00
memstick
message
mfd
mfd: twl6040: Fix child-node lookup
2017-12-29 17:42:58 +01:00
misc
cxl: Check if vphb exists before iterating over AFU devices
2017-12-25 14:23:36 +01:00
mmc
mmc: mediatek: Fixed bug where clock frequency could be set wrong
2017-12-20 10:07:23 +01:00
mtd
mtd: nand: pxa3xx: Fix READOOB implementation
2018-01-10 09:29:54 +01:00
net
tun: fix a memory leak for tfile->tx_array
2018-01-31 12:55:56 +01:00
nfc
nfc: fdp: fix NULL pointer dereference
2017-08-06 18:59:42 -07:00
ntb
ntb: transport shouldn't disable link due to bogus values in SPADs
2017-08-30 10:21:55 +02:00
nubus
nvdimm
libnvdimm, btt: Fix an incompatibility in the log layout
2018-01-23 19:57:03 +01:00
nvme
nvme-loop: handle cpu unplug when re-establishing the controller
2017-12-25 14:23:37 +01:00
nvmem
nvmem: imx-ocotp: Fix wrong register size
2017-08-06 18:59:48 -07:00
of
of: device: Export of_device_{get_modalias, uvent_modalias} to modules
2017-07-27 15:08:08 -07:00
oprofile
parisc
parisc: Hide Diva-built-in serial aux and graphics card
2017-12-29 17:42:59 +01:00
parport
parisc, parport_gsc: Fixes for printk continuation lines
2017-06-17 06:41:54 +02:00
pci
PCI / PM: Force devices to D0 in pci_pm_thaw_noirq()
2017-12-29 17:42:59 +01:00
pcmcia
perf
phy
phy: work around 'phys' references to usb-nop-xceiv devices
2018-01-23 19:57:07 +01:00
pinctrl
pinctrl: cherryview: Mask all interrupts on Intel_Strago based systems
2017-12-29 17:42:59 +01:00
platform
platform/x86: wmi: Call acpi_wmi_init() later
2018-01-17 09:38:51 +01:00
pnp
power
power: supply: axp288_fuel_gauge: Read 12 bit values 2 registers at a time
2017-11-21 09:23:25 +01:00
powercap
powercap/intel_rapl: fix and tidy up error handling
2017-01-19 20:18:07 +01:00
pps
ps3
ptp
pwm
pwm: rockchip: State of PWM clock should synchronize with PWM enabled state
2017-04-21 09:31:22 +02:00
rapidio
drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()'
2017-12-14 09:28:22 +01:00
ras
regulator
regulator: fan53555: fix I2C device ids
2017-11-02 09:49:15 +01:00
remoteproc
remoteproc: qcom: mdt_loader: Don't overwrite firmware object
2017-03-12 06:41:50 +01:00
reset
reset: ti_syscon: fix a ti_syscon_reset_status issue
2017-10-08 10:26:03 +02:00
rpmsg
rpmsg: virtio_rpmsg_bus: fix channel creation
2017-01-26 08:24:44 +01:00
rtc
rtc: set the alarm to the next expiring timer
2017-12-25 14:23:46 +01:00
s390
s390/qeth: update takeover IPs after configuration change
2018-01-02 20:35:15 +01:00
sbus
scsi
scsi: libiscsi: fix shifting of DID_REQUEUE host byte
2018-01-31 12:55:52 +01:00
sfi
sh
sn
soc
soc: mediatek: pwrap: fix compiler errors
2017-12-20 10:07:32 +01:00
spi
spi: xilinx: Detect stall with Unknown commands
2017-12-29 17:42:59 +01:00
spmi
spmi: Include OF based modalias in device uevent
2017-07-27 15:08:08 -07:00
ssb
staging
staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
2018-01-17 09:38:56 +01:00
target
target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK
2018-01-17 09:38:54 +01:00
tc
thermal
thermal/drivers/hisi: Fix multiple alarm interrupts firing
2017-12-25 14:23:46 +01:00
thunderbolt
tty
tty: fix tty_ldisc_receive_buf() documentation
2018-01-02 20:35:17 +01:00
uio
usb
usbip: prevent vhci_hcd driver from leaking a socket pointer address
2018-01-31 12:55:50 +01:00
uwb
uwb: ensure that endpoint is interrupt
2017-10-12 11:51:19 +02:00
vfio
vfio/pci: Virtualize Maximum Payload Size
2017-12-25 14:23:45 +01:00
vhost
vhost-vsock: add pkt cancel capability
2017-12-25 14:23:37 +01:00
video
backlight: pwm_bl: Fix overflow condition
2017-12-25 14:23:43 +01:00
virt
virtio
virtio_balloon: prevent uninitialized variable use
2017-12-25 14:23:42 +01:00
vlynq
vme
VME: restore bus_remove function causing incomplete module unload
2017-03-12 06:41:50 +01:00
w1
w1: ds2490: USB transfer buffers need to be DMAable
2017-03-12 06:41:48 +01:00
watchdog
watchdog: kempld: fix gcc-4.3 build
2017-10-21 17:21:33 +02:00
xen
xen: xenbus driver must not accept invalid transaction ids
2017-11-30 08:39:15 +00:00
zorro
Kconfig
Makefile
usb: Make sure usb/phy/of gets built-in
2017-05-20 14:28:35 +02:00