On 9/14/20 2:16 PM, Andrey Ryabinin wrote:
> @@ -96,7 +97,8 @@ static void user_free_payload_rcu(struct rcu_head *head)
>       struct user_key_payload *payload;
>  
>       payload = container_of(head, struct user_key_payload, rcu);
> -     kzfree(payload);

can payload be NULL here?

> +     memset(payload, 0, sizeof(*payload) + payload->datalen);
> +     kvfree(payload);
>  }
>  
>  /*

> @@ -182,7 +184,8 @@ void user_destroy(struct key *key)
>  {
>       struct user_key_payload *upayload = key->payload.data;
>  
> -     kzfree(upayload);

... and here too

> +     memset(upayload, 0, sizeof(*upayload) + upayload->datalen);
> +     kvfree(upayload);
>  }
>  
>  EXPORT_SYMBOL_GPL(user_destroy);
> 
_______________________________________________
Devel mailing list
Devel@openvz.org
https://lists.openvz.org/mailman/listinfo/devel

Reply via email to