Yang Yingliang 92289f58f0 net/802/garp: fix memleak in garp_request_join() ... [ Upstream commit 42ca63f980 ] I got kmemleak report when doing fuzz test: BUG: memory leak unreferenced object 0xffff88810c909b80 (size 64): comm "syz", pid 957, jiffies 4295220394 (age 399.090s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 08 00 00 00 01 02 00 04 ................ backtrace: [<00000000ca1f2e2e>] garp_request_join+0x285/0x3d0 [<00000000bf153351>] vlan_gvrp_request_join+0x15b/0x190 [<0000000024005e72>] vlan_dev_open+0x706/0x980 [<00000000dc20c4d4>] __dev_open+0x2bb/0x460 [<0000000066573004>] __dev_change_flags+0x501/0x650 [<0000000035b42f83>] rtnl_configure_link+0xee/0x280 [<00000000a5e69de0>] __rtnl_newlink+0xed5/0x1550 [<00000000a5258f4a>] rtnl_newlink+0x66/0x90 [<00000000506568ee>] rtnetlink_rcv_msg+0x439/0xbd0 [<00000000b7eaeae1>] netlink_rcv_skb+0x14d/0x420 [<00000000c373ce66>] netlink_unicast+0x550/0x750 [<00000000ec74ce74>] netlink_sendmsg+0x88b/0xda0 [<00000000381ff246>] sock_sendmsg+0xc9/0x120 [<000000008f6a2db3>] ____sys_sendmsg+0x6e8/0x820 [<000000008d9c1735>] ___sys_sendmsg+0x145/0x1c0 [<00000000aa39dd8b>] __sys_sendmsg+0xfe/0x1d0 Calling garp_request_leave() after garp_request_join(), the attr->state is set to GARP_APPLICANT_VO, garp_attr_destroy() won't be called in last transmit event in garp_uninit_applicant(), the attr of applicant will be leaked. To fix this leak, iterate and free each attr of applicant before rerturning from garp_uninit_applicant(). Reported-by: Hulk Robot <hulkci@huawei.com> Signed-off-by: Yang Yingliang <yangyingliang@huawei.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-07-31 08:16:11 +02:00
..
6lowpan
9p	net: 9p: advance iov on empty read	2021-04-07 15:00:08 +02:00
802	net/802/garp: fix memleak in garp_request_join()	2021-07-31 08:16:11 +02:00
8021q	net: vlan: avoid leaks on register_vlan_dev() failures	2021-01-17 14:16:55 +01:00
appletalk	appletalk: Fix skb allocation size in loopback case	2021-04-07 15:00:08 +02:00
atm	net: atm: fix update of position index in lec_seq_next	2020-10-31 12:26:30 -07:00
ax25
batman-adv	batman-adv: Avoid WARN_ON timing related checks	2021-06-23 14:42:41 +02:00
bluetooth	Bluetooth: mgmt: Fix the command returns garbage parameter value	2021-07-19 09:44:54 +02:00
bpf	bpf, test: fix NULL pointer dereference on invalid expected_attach_type	2021-07-28 14:35:37 +02:00
bpfilter	bpfilter: Specify the log level for the kmsg message	2021-07-14 16:56:29 +02:00
bridge	net: bridge: sync fdb to new unicast-filtering ports	2021-07-25 14:36:19 +02:00
caif	net: fix uninit-value in caif_seqpkt_sendmsg	2021-07-28 14:35:38 +02:00
can	can: j1939: j1939_sk_setsockopt(): prevent allocation of j1939 filter for optlen == 0	2021-07-14 16:56:27 +02:00
ceph	libceph: clear con->out_msg on Policy::stateful_server faults	2020-10-12 15:29:27 +02:00
core	skbuff: Fix build with SKB extensions disabled	2021-07-28 14:35:48 +02:00
dcb	net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands	2021-01-23 16:04:01 +01:00
dccp	ipv6: weaken the v4mapped source check	2021-03-30 14:32:01 +02:00
decnet	net: decnet: Fix sleeping inside in af_decnet	2021-07-28 14:35:38 +02:00
dns_resolver
dsa	net: dsa: properly check for the bridge_leave methods in dsa_switch_bridge_leave()	2021-07-25 14:36:20 +02:00
ethernet
ethtool	net: ethtool: clear heap allocations for ethtool function	2021-06-30 08:47:20 -04:00
hsr	net: hsr: fix mac_len checks	2021-06-03 09:00:50 +02:00
ieee802154	net: ieee802154: fix null deref in parse dev addr	2021-06-18 10:00:03 +02:00
ife
ipv4	tcp: disable TFO blackhole logic by default	2021-07-28 14:35:41 +02:00
ipv6	ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions	2021-07-28 14:35:40 +02:00
iucv	net/af_iucv: remove WARN_ONCE on malformed RX packets	2021-03-07 12:34:05 +01:00
kcm
key	af_key: relax availability checks for skb size calculation	2021-02-13 13:55:02 +01:00
l2tp	net: l2tp: reduce log level of messages in receive path, add counter instead	2021-03-17 17:06:11 +01:00
l3mdev
lapb	net: lapb: Copy the skb before sending a packet	2021-02-10 09:29:14 +01:00
llc
mac80211	mac80211: consider per-CPU statistics if present	2021-07-19 09:44:53 +02:00
mac802154	net: mac802154: Fix general protection fault	2021-04-14 08:42:13 +02:00
mpls	net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0	2021-03-17 17:06:11 +01:00
mptcp	mptcp: fix warning in __skb_flow_dissect() when do syn cookie for subflow join	2021-07-28 14:35:34 +02:00
ncsi	net/ncsi: Avoid channel_monitor hrtimer deadlock	2021-04-14 08:42:08 +02:00
netfilter	netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo	2021-07-25 14:36:19 +02:00
netlabel	netlabel: Fix memory leak in netlbl_mgmt_add_common	2021-07-14 16:56:22 +02:00
netlink	netlink: disable IRQs for netlink_lock_table()	2021-06-16 12:01:36 +02:00
netrom	netrom: Decrease sock refcount when sock timers expire	2021-07-28 14:35:38 +02:00
nfc	net/nfc/rawsock.c: fix a permission check bug	2021-06-16 12:01:35 +02:00
nsh
openvswitch	openvswitch: meter: fix race when getting now_ms.	2021-06-03 09:00:47 +02:00
packet	net/packet: annotate accesses to po->ifindex	2021-06-30 08:47:22 -04:00
phonet
psample	net: psample: Fix netlink skb length with tunnel info	2021-03-07 12:34:07 +01:00
qrtr	net: qrtr: ns: Fix error return code in qrtr_ns_init()	2021-07-14 16:56:16 +02:00
rds	net: rds: fix memory leak in rds_recvmsg	2021-06-23 14:42:42 +02:00
rfkill	rfkill: Fix use-after-free in rfkill_resume()	2020-11-12 09:18:06 +01:00
rose	rose: Fix Null pointer dereference in rose_send_frame()	2020-11-20 10:04:58 -08:00
rxrpc	rxrpc: Fix clearance of Tx/Rx ring when releasing a call	2021-02-17 11:02:28 +01:00
sched	net: sched: cls_api: Fix the the wrong parameter	2021-07-28 14:35:41 +02:00
sctp	sctp: update active_key for asoc when old key is being replaced	2021-07-28 14:35:41 +02:00
smc	net/smc: remove device from smcd_dev_list after failed device_add()	2021-06-03 09:00:48 +02:00
strparser
sunrpc	SUNRPC: prevent port reuse on transports which don't request it.	2021-07-20 16:05:51 +02:00
switchdev	net: switchdev: don't set port_obj_info->handled true when -EOPNOTSUPP	2021-02-07 15:37:12 +01:00
tipc	net: tipc: fix FB_MTU eat two pages	2021-07-14 16:56:32 +02:00
tls	tls: prevent oversized sendfile() hangs by ignoring MSG_MORE	2021-07-14 16:56:24 +02:00
unix	af_unix: fix garbage collect vs MSG_PEEK	2021-07-31 08:16:11 +02:00
vmw_vsock	vsock: notify server to shutdown when client has pending signal	2021-07-19 09:44:52 +02:00
wimax	genetlink: move to smaller ops wherever possible	2020-10-02 19:11:11 -07:00
wireless	cfg80211: fix default HE tx bitrate mask in 2G band	2021-07-19 09:44:53 +02:00
x25	net/x25: Return the correct errno code	2021-06-18 10:00:06 +02:00
xdp	xsk: Fix broken Tx ring validation	2021-07-14 16:56:23 +02:00
xfrm	xfrm: Fix error reporting in xfrm_state_construct.	2021-07-19 09:44:49 +02:00
compat.c	net: Return the correct errno code	2021-06-18 10:00:06 +02:00
devres.c
Kconfig
Makefile
socket.c	net: make get_net_ns return error if NET_NS is disabled	2021-06-23 14:42:44 +02:00
sysctl_net.c