Eric Biggers a1be1f3931 kernel/relay.c: revert "kernel/relay.c: fix potential memory leak" ...

This reverts commit ba62bafe94 ("kernel/relay.c: fix potential memory leak").

This commit introduced a double free bug, because 'chan' is already
freed by the line:

    kref_put(&chan->kref, relay_destroy_channel);

This bug was found by syzkaller, using the BLKTRACESETUP ioctl.

Link: http://lkml.kernel.org/r/20180127004759.101823-1-ebiggers3@gmail.com
Fixes: ba62bafe94 ("kernel/relay.c: fix potential memory leak")
Signed-off-by: Eric Biggers <ebiggers@google.com>
Reported-by: syzbot <syzkaller@googlegroups.com>
Reviewed-by: Andrew Morton <akpm@linux-foundation.org>
Cc: Zhouyi Zhou <yizhouzhou@ict.ac.cn>
Cc: Jens Axboe <axboe@kernel.dk>
Cc: <stable@vger.kernel.org>	[4.7+]
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2018-02-06 18:32:46 -08:00

..

bpf

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2018-01-31 14:31:10 -08:00

cgroup

string: drop __must_check from strscpy() and restore strscpy() usages in cgroup

2018-01-19 08:51:36 -08:00

configs

Makefile: introduce CONFIG_CC_STACKPROTECTOR_AUTO

2018-02-06 18:32:44 -08:00

debug

signal: Simplify and fix kdb_send_sig

2018-01-03 18:01:08 -06:00

events

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2018-01-31 14:31:10 -08:00

gcov

…

irq

Merge branch 'irq-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2018-02-04 11:41:31 -08:00

livepatch

Merge branch 'for-4.16/remove-immediate' into for-linus

2018-01-31 16:36:38 +01:00

locking

Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2018-01-30 10:44:56 -08:00

power

x86/power: Fix swsusp_arch_resume prototype

2018-02-02 23:33:50 +01:00

printk

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk

2018-02-01 13:36:15 -08:00

rcu

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2018-01-31 11:23:28 -08:00

sched

cpumask: make cpumask_size() return "unsigned int"

2018-02-06 18:32:45 -08:00

time

Merge branch 'misc.poll' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2018-01-30 17:58:07 -08:00

trace

Merge tag 'trace-v4.16' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

2018-02-01 13:15:23 -08:00

.gitignore

…

acct.c

kernel/acct.c: fix the acct->needcheck check in check_free_space()

2018-01-04 16:45:09 -08:00

async.c

kernel/async.c: revert "async: simplify lowest_in_progress()"

2018-02-06 18:32:44 -08:00

audit_fsnotify.c

…

audit_tree.c

…

audit_watch.c

…

audit.c

…

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

…

compat.c

cpumask: make cpumask_size() return "unsigned int"

2018-02-06 18:32:45 -08:00

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2017-12-31 12:30:34 -08:00

crash_core.c

kdump: write correct address of mem_section into vmcoreinfo

2018-01-13 10:42:48 -08:00

crash_dump.c

…

cred.c

…

delayacct.c

delayacct: Account blkio completion on the correct task

2018-01-16 03:29:36 +01:00

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

kernel/exit.c: export abort() to modules

2018-01-04 16:45:09 -08:00

extable.c

…

fail_function.c

error-injection: Support fault injection framework

2018-01-12 17:33:38 -08:00

fork.c

kernel/fork.c: add comment about usage of CLONE_FS flags and namespaces

2018-02-06 18:32:45 -08:00

freezer.c

…

futex_compat.c

…

futex.c

pids: introduce find_get_task_by_vpid() helper

2018-02-06 18:32:46 -08:00

groups.c

…

hung_task.c

…

irq_work.c

irq/work: Improve the flag definitions

2018-01-08 19:43:15 +01:00

jump_label.c

sched/core: Fix cpu.max vs. cpuhotplug deadlock

2018-01-24 10:03:44 +01:00

kallsyms.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk

2018-02-01 13:36:15 -08:00

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

…

kexec_core.c

…

kexec_file.c

…

kexec_internal.h

…

kexec.c

…

kmod.c

…

kprobes.c

error-injection: Separate error-injection from kprobe

2018-01-12 17:33:38 -08:00

ksysfs.c

…

kthread.c

…

latencytop.c

…

Makefile

error-injection: Support fault injection framework

2018-01-12 17:33:38 -08:00

memremap.c

…

module_signing.c

…

module-internal.h

…

module.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk

2018-02-01 13:36:15 -08:00

notifier.c

…

nsproxy.c

…

padata.c

padata: add SPDX identifier

2018-01-05 18:43:00 +11:00

panic.c

…

params.c

…

pid_namespace.c

…

pid.c

pids: introduce find_get_task_by_vpid() helper

2018-02-06 18:32:46 -08:00

profile.c

…

ptrace.c

pids: introduce find_get_task_by_vpid() helper

2018-02-06 18:32:46 -08:00

range.c

…

reboot.c

…

relay.c

kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"

2018-02-06 18:32:46 -08:00

resource.c

…

seccomp.c

Merge branch 'next-seccomp' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2018-01-31 13:44:45 -08:00

signal.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching

2018-01-31 13:02:18 -08:00

smp.c

…

smpboot.c

…

smpboot.h

…

softirq.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

…

sysctl_binary.c

…

sysctl.c

mm, hugetlb: remove hugepages_treat_as_movable sysctl

2018-01-31 17:18:37 -08:00

task_work.c

locking/barriers: Convert users of lockless_dereference() to READ_ONCE()

2017-12-17 13:57:15 +01:00

taskstats.c

pids: introduce find_get_task_by_vpid() helper

2018-02-06 18:32:46 -08:00

test_kprobes.c

…

torture.c

…

tracepoint.c

…

tsacct.c

…

ucount.c

…

uid16.c

…

umh.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

watchdog_hld.c

…

watchdog.c

…

workqueue_internal.h

…

workqueue.c

Merge tag 'staging-4.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

2018-02-01 09:51:57 -08:00