diff options
| author | Andrey Konovalov <[email protected]> | 2018-04-10 23:30:35 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2018-04-11 17:28:32 +0000 |
| commit | 91c93ed07f04f5b32a30321d522d8ca9504745bf (patch) | |
| tree | 4d75929029356dbafca62cf8e3af4265824b9d94 /fs/proc/root.c | |
| parent | kasan, slub: fix handling of kasan_slab_free hook (diff) | |
| download | kernel-91c93ed07f04f5b32a30321d522d8ca9504745bf.tar.gz kernel-91c93ed07f04f5b32a30321d522d8ca9504745bf.zip | |
kasan: fix invalid-free test crashing the kernel
When an invalid-free is triggered by one of the KASAN tests, the object
doesn't actually get freed. This later leads to a BUG failure in
kmem_cache_destroy that checks that there are no allocated objects in
the cache that is being destroyed.
Fix this by calling kmem_cache_free with the proper object address after
the call that triggers invalid-free.
Link: http://lkml.kernel.org/r/286eaefc0a6c3fa9b83b87e7d6dc0fbb5b5c9926.1519924383.git.andreyknvl@google.com
Signed-off-by: Andrey Konovalov <[email protected]>
Acked-by: Andrey Ryabinin <[email protected]>
Cc: Alexander Potapenko <[email protected]>
Cc: Dmitry Vyukov <[email protected]>
Cc: Geert Uytterhoeven <[email protected]>
Cc: Nick Terrell <[email protected]>
Cc: Chris Mason <[email protected]>
Cc: Yury Norov <[email protected]>
Cc: Al Viro <[email protected]>
Cc: "Luis R . Rodriguez" <[email protected]>
Cc: Palmer Dabbelt <[email protected]>
Cc: "Paul E . McKenney" <[email protected]>
Cc: Jeff Layton <[email protected]>
Cc: "Jason A . Donenfeld" <[email protected]>
Cc: Kostya Serebryany <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'fs/proc/root.c')
0 files changed, 0 insertions, 0 deletions