On 13/02/2019 4.05, Qian Cai wrote:
get_freepointer() could return NULL if there is no more free objects in the slab. However, it could return a tagged pointer (like 0x2200000000000000) with KASAN_SW_TAGS which would escape the NULL object checking in check_valid_pointer() and trigger errors below, so untag the object before checking for a NULL object there.
Reviewed-by: Pekka Enberg <penb...@kernel.org>
