android_kernel_oneplus_msm8998/net/9p
Dominique Martinet 1c6c5d0c1a 9p: clear dangling pointers in p9stat_free
[ Upstream commit 62e3941776fea8678bb8120607039410b1b61a65 ]

p9stat_free is more of a cleanup function than a 'free' function as it
only frees the content of the struct; there are chances of use-after-free
if it is improperly used (e.g. p9stat_free called twice as it used to be
possible to)

Clearing dangling pointers makes the function idempotent and safer to use.

Link: http://lkml.kernel.org/r/1535410108-20650-2-git-send-email-asmadeus@codewreck.org
Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr>
Reported-by: syzbot+d4252148d198410b864f@syzkaller.appspotmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-11-21 09:27:39 +01:00
..
client.c net/9p/client.c: version pointer uninitialized 2018-09-09 20:04:33 +02:00
error.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
Kconfig net/9p: remove depends on CONFIG_EXPERIMENTAL 2013-01-11 11:39:33 -08:00
Makefile [net/9p] Preparation and helper functions for zero copy 2011-03-15 09:57:34 -05:00
mod.c 9p: Reduce object size with CONFIG_NET_9P_DEBUG 2012-01-05 10:51:44 -06:00
protocol.c 9p: clear dangling pointers in p9stat_free 2018-11-21 09:27:39 +01:00
protocol.h net/9p: Convert net/9p protocol dumps to tracepoints 2011-10-24 11:13:12 -05:00
trans_common.c net/9p: remove (now-)unused helpers 2015-04-11 22:28:29 -04:00
trans_common.h net/9p: remove (now-)unused helpers 2015-04-11 22:28:29 -04:00
trans_fd.c 9p: fix multiple NULL-pointer-dereferences 2018-09-09 20:04:34 +02:00
trans_rdma.c 9p: fix multiple NULL-pointer-dereferences 2018-09-09 20:04:34 +02:00
trans_virtio.c net/9p: fix error path of p9_virtio_probe 2018-09-15 09:40:39 +02:00
util.c net/9p: convert to idr_alloc() 2013-02-27 19:10:20 -08:00