Re: [PATCH] wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma

2021-04-13 Thread lyl2019
Hi, my dear maintainers. I'm very sorry to disturb you, that beacuse this patch has been not reviewed for one weeks. Could you help to review this patch? It will not cost you much time. Sincerely. > -原始邮件- > 发件人: "Lv Yunlong" > 发送时间: 2021-04-03 13:47:55 (星期六) > 收件人: lucia

Re: [PATCH] wireless: marvell: mwl8k: Fix a double Free in mwl8k_probe_hw

2021-04-13 Thread lyl2019
Dear maintainers, I'm sorry to disturb you, but this patch has not been reviewed for more than a week. Could you please help to review this patch? It will not take you a lot time. Sincerely. > -原始邮件- > 发件人: "Lv Yunlong" > 发送时间: 2021-04-03 02:26:27 (星期六) > 收件人: buyt...@w

Re: [PATCH] wireless: ath10k: Fix a use after free in ath10k_htc_send_bundle

2021-04-13 Thread lyl2019
Hi, maintainers of kerenl. I submitted this patch two weeks ago, but it still hasn't been reviewed. Could you help to review this patch? It will not take you much time. Thank you very much. > -原始邮件- > 发件人: "Lv Yunlong" > 发送时间: 2021-03-29 20:01:54 (星期一) > 收件人: kv...@codeaurora.o

Re: [PATCH] wireless/marvell/mwifiex: Fix a double free in mwifiex_send_tdls_action_frame

2021-04-13 Thread lyl2019
Hi, maintianers. Sorry to disturb you, but this patch seems to be missed more than two weeks. Could you help to review this patch? I am sure it won't take you much time. Thanks. > -原始邮件- > 发件人: "Lv Yunlong" > 发送时间: 2021-03-29 19:24:35 (星期一) > 收件人: amitkar...@gmail.com, ganapathi.

Re: Re: [Drbd-dev] [PATCH] drbd: Fix a use after free in get_initial_state

2021-04-01 Thread lyl2019
> -原始邮件- > 发件人: "Christoph Böhmwalder" > 发送时间: 2021-04-01 21:01:20 (星期四) > 收件人: "Lv Yunlong" > 抄送: philipp.reis...@linbit.com, lars.ellenb...@linbit.com, ax...@kernel.dk, > linux-bl...@vger.kernel.org, linux-kernel@vger.kernel.org, > drbd-...@lists.linbit.com > 主题: Re: [Drbd-dev] [PA

Re: Re: Re: [Drbd-dev] [PATCH] drbd: Fix a use after free in get_initial_state

2021-04-01 Thread lyl2019
> -原始邮件- > 发件人: lyl2...@mail.ustc.edu.cn > 发送时间: 2021-04-01 23:13:58 (星期四) > 收件人: "Christoph Böhmwalder" > 抄送: philipp.reis...@linbit.com, lars.ellenb...@linbit.com, ax...@kernel.dk, > linux-bl...@vger.kernel.org, linux-kernel@vger.kernel.org, > drbd-...@lists.linbit.com > 主题: Re: Re:

Re: Re: [PATCH] net/rds: Fix a use after free in rds_message_map_pages

2021-03-30 Thread lyl2019
> -原始邮件- > 发件人: "David Miller" > 发送时间: 2021-03-31 08:02:28 (星期三) > 收件人: lyl2...@mail.ustc.edu.cn > 抄送: santosh.shilim...@oracle.com, k...@kernel.org, net...@vger.kernel.org, > linux-r...@vger.kernel.org, rds-de...@oss.oracle.com, > linux-kernel@vger.kernel.org > 主题: Re: [PATCH] net/rd

Re: Re: [PATCH] dma: Fix a double free in dma_async_device_register

2021-03-30 Thread lyl2019
> -原始邮件- > 发件人: "Dave Jiang" > 发送时间: 2021-03-31 00:05:15 (星期三) > 收件人: "Lv Yunlong" , vk...@kernel.org > 抄送: dmaeng...@vger.kernel.org, linux-kernel@vger.kernel.org > 主题: Re: [PATCH] dma: Fix a double free in dma_async_device_register > > > On 3/30/2021 2:01 AM, Lv Yunlong wrote: > > I

Re: Re: [BUG] fs/notify/mark: A potential use after free in fsnotify_put_mark_wake

2021-03-29 Thread lyl2019
> -原始邮件- > 发件人: "Jan Kara" > 发送时间: 2021-03-29 21:57:40 (星期一) > 收件人: lyl2...@mail.ustc.edu.cn > 抄送: j...@suse.cz, amir7...@gmail.com, linux-fsde...@vger.kernel.org, > linux-kernel@vger.kernel.org > 主题: Re: [BUG] fs/notify/mark: A potential use after free in > fsnotify_put_mark_wake >

Re: Re: [PATCH] ethernet/realtek/r8169: Fix a double free in rtl8169_start_xmit

2021-03-29 Thread lyl2019
> -原始邮件- > 发件人: "Heiner Kallweit" > 发送时间: 2021-03-29 17:51:30 (星期一) > 收件人: "Lv Yunlong" , nic_s...@realtek.com, > k...@kernel.org > 抄送: net...@vger.kernel.org, linux-kernel@vger.kernel.org > 主题: Re: [PATCH] ethernet/realtek/r8169: Fix a double free in > rtl8169_start_xmit > > On 29.0

[BUG] fs/notify/mark: A potential use after free in fsnotify_put_mark_wake

2021-03-28 Thread lyl2019
Hi, My static analyzer tool reported a use after free in fsnotify_put_mark_wake of the file: fs/notify/mark.c. In fsnotify_put_mark_wake, it calls fsnotify_put_mark(mark). Inside the function fsnotify_put_mark(), if conn is NULL, it will call fsnotify_final_mark_destroy(mark) to free mark->gr

Re: Re: [PATCH] target: Fix a double put in transport_free_session

2021-03-26 Thread lyl2019
> -原始邮件- > 发件人: "Mike Christie" > 发送时间: 2021-03-26 01:24:58 (星期五) > 收件人: lyl2...@mail.ustc.edu.cn > 抄送: martin.peter...@oracle.com, linux-s...@vger.kernel.org, > target-de...@vger.kernel.org, linux-kernel@vger.kernel.org, "Nilesh Javali" > > 主题: Re: [PATCH] target: Fix a double put i

Re: Re: [PATCH] target: Fix a double put in transport_free_session

2021-03-25 Thread lyl2019
> -原始邮件- > 发件人: michael.chris...@oracle.com > 发送时间: 2021-03-24 00:28:35 (星期三) > 收件人: "Lv Yunlong" , martin.peter...@oracle.com > 抄送: linux-s...@vger.kernel.org, target-de...@vger.kernel.org, > linux-kernel@vger.kernel.org > 主题: Re: [PATCH] target: Fix a double put in transport_free_sess

Re: Re: [PATCH] fuse: Fix a potential double free in virtio_fs_get_tree

2021-03-24 Thread lyl2019
> -原始邮件- > 发件人: "Vivek Goyal" > 发送时间: 2021-03-24 01:10:03 (星期三) > 收件人: "Lv Yunlong" > 抄送: stefa...@redhat.com, mik...@szeredi.hu, > virtualizat...@lists.linux-foundation.org, linux-fsde...@vger.kernel.org, > linux-kernel@vger.kernel.org > 主题: Re: [PATCH] fuse: Fix a potential double

Re: RE: [PATCH] video/fbdev: Fix a double free in hvfb_probe

2021-03-24 Thread lyl2019
> -原始邮件- > 发件人: "Michael Kelley" > 发送时间: 2021-03-24 02:52:07 (星期三) > 收件人: "Lv Yunlong" , "KY Srinivasan" > , "Haiyang Zhang" , "Stephen > Hemminger" , "wei@kernel.org" > 抄送: "linux-hyp...@vger.kernel.org" , > "dri-de...@lists.freedesktop.org" , > "linux-fb...@vger.kernel.org" ,

Re: Re: [PATCH] thunderbolt: Fix a double put in tb_cfg_read_raw

2021-03-23 Thread lyl2019
> -原始邮件- > 发件人: "Mika Westerberg" > 发送时间: 2021-03-23 22:06:47 (星期二) > 收件人: "Lv Yunlong" > 抄送: andreas.noe...@gmail.com, michael.ja...@intel.com, yehezkel...@gmail.com, > linux-...@vger.kernel.org, linux-kernel@vger.kernel.org > 主题: Re: [PATCH] thunderbolt: Fix a double put in tb_cfg_r

Re: Re: [PATCH] net/mlx5: Fix a potential use after free in mlx5e_ktls_del_rx

2021-03-23 Thread lyl2019
> -原始邮件- > 发件人: "Maxim Mikityanskiy" > 发送时间: 2021-03-23 16:52:07 (星期二) > 收件人: "Lv Yunlong" , bor...@nvidia.com, > sae...@nvidia.com, l...@kernel.org, da...@davemloft.net, k...@kernel.org, > maxi...@mellanox.com > 抄送: net...@vger.kernel.org, linux-r...@vger.kernel.org, > linux-kernel@

Re: Re: [PATCH] usb: Add data checks in usbtmc_disconnect

2021-03-23 Thread lyl2019
> -原始邮件- > 发件人: "Greg KH" > 发送时间: 2021-03-23 15:16:55 (星期二) > 收件人: "Lv Yunlong" > 抄送: linux-...@vger.kernel.org, linux-kernel@vger.kernel.org > 主题: Re: [PATCH] usb: Add data checks in usbtmc_disconnect > > On Mon, Mar 22, 2021 at 08:47:17PM -0700, Lv Yunlong wrote: > > In usbtmc_disco

Re: Re: Re: [PATCH] infiniband: Fix a use after free in isert_connect_request

2021-03-22 Thread lyl2019
> -原始邮件- > 发件人: "Leon Romanovsky" > 发送时间: 2021-03-22 23:31:08 (星期一) > 收件人: lyl2...@mail.ustc.edu.cn > 抄送: s...@grimberg.me, dledf...@redhat.com, j...@ziepe.ca, > linux-r...@vger.kernel.org, target-de...@vger.kernel.org, > linux-kernel@vger.kernel.org > 主题: Re: Re: [PATCH] infiniband:

[Bug] qlogic/qlcnic: Report a potential use after free in qlcnic_probe

2021-03-22 Thread lyl2019
Hi, my static analyzer tool reported a potential uaf in qlcnic_probe. The problem file is drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c in Linux Kernel-5.12-rc2. In funtion qlcnic_probe around line 2623, it calls qlcnic_dcb_enable() to enable adapter->dcb. But the adapter->dcb could be f

Re: Re: [PATCH] infiniband: Fix a use after free in isert_connect_request

2021-03-22 Thread lyl2019
> -原始邮件- > 发件人: "Leon Romanovsky" > 发送时间: 2021-03-22 22:27:17 (星期一) > 收件人: "Lv Yunlong" > 抄送: s...@grimberg.me, dledf...@redhat.com, j...@ziepe.ca, > linux-r...@vger.kernel.org, target-de...@vger.kernel.org, > linux-kernel@vger.kernel.org > 主题: Re: [PATCH] infiniband: Fix a use after

Re: [PATCH] net/rds: Fix a use after free in rds_message_map_pages

2021-03-18 Thread lyl2019
Just as a reminder, there has been no reply to this message for more than a week. Could someone help to fix this issue? > -原始邮件- > 发件人: "Lv Yunlong" > 发送时间: 2021-03-11 16:46:16 (星期四) > 收件人: santosh.shilim...@oracle.com, da...@davemloft.net, k...@kernel.org > 抄送: net...@vger.kernel.org,

Re: Re: [BUG] net/ppp: A use after free in ppp_unregister_channe

2021-03-12 Thread lyl2019
> -原始邮件- > 发件人: "Tom Parkin" > 发送时间: 2021-03-12 18:12:58 (星期五) > 收件人: lyl2...@mail.ustc.edu.cn > 抄送: pau...@samba.org, da...@davemloft.net, linux-...@vger.kernel.org, > net...@vger.kernel.org, linux-kernel@vger.kernel.org > 主题: Re: [BUG] net/ppp: A use after free in ppp_unregister_chan

Re: RE: [PATCH] infiniband/i40iw: Fix a use after free in i40iw_cm_event_handler

2021-03-11 Thread lyl2019
> -原始邮件- > 发件人: "Saleem, Shiraz" > 发送时间: 2021-03-12 09:13:39 (星期五) > 收件人: "Jason Gunthorpe" , "Lv Yunlong" > > 抄送: "Latif, Faisal" , "dledf...@redhat.com" > , "linux-r...@vger.kernel.org" > , "linux-kernel@vger.kernel.org" > > 主题: RE: [PATCH] infiniband/i40iw: Fix a use after free

Re: Re: Re: [PATCH] lib/test_kmod: Fix a use after free in register_test_dev_kmod

2021-03-11 Thread lyl2019
> -原始邮件- > 发件人: "Luis Chamberlain" > 发送时间: 2021-03-11 21:58:33 (星期四) > 收件人: lyl2...@mail.ustc.edu.cn > 抄送: linux-kernel@vger.kernel.org > 主题: Re: Re: [PATCH] lib/test_kmod: Fix a use after free in > register_test_dev_kmod > > On Thu, Mar 11, 2021 at 09:31:55PM +0800, lyl2...@mail.ustc

Re: Re: [PATCH] lib/test_kmod: Fix a use after free in register_test_dev_kmod

2021-03-11 Thread lyl2019
> -原始邮件- > 发件人: "Luis Chamberlain" > 发送时间: 2021-03-11 21:01:08 (星期四) > 收件人: "Lv Yunlong" > 抄送: linux-kernel@vger.kernel.org > 主题: Re: [PATCH] lib/test_kmod: Fix a use after free in register_test_dev_kmod > > On Thu, Mar 11, 2021 at 12:02:46AM -0800, Lv Yunlong wrote: > > In register_t

[BUG] net/ppp: A use after free in ppp_unregister_channe

2021-03-11 Thread lyl2019
File: drivers/net/ppp/ppp_generic.c In ppp_unregister_channel, pch could be freed in ppp_unbridge_channels() but after that pch is still in use. Inside the function ppp_unbridge_channels, if "pchbb == pch" is true and then pch will be freed. I checked the commit history and found that this proble

Re: Re: Re: [PATCH] infiniband/core: Fix a use after free in cm_work_handler

2021-03-11 Thread lyl2019
> -原始邮件- > 发件人: "Leon Romanovsky" > 发送时间: 2021-03-11 19:05:03 (星期四) > 收件人: lyl2...@mail.ustc.edu.cn > 抄送: dledf...@redhat.com, j...@ziepe.ca, linux-r...@vger.kernel.org, > linux-kernel@vger.kernel.org > 主题: Re: Re: [PATCH] infiniband/core: Fix a use after free in cm_work_handler > > O

Re: Re: [PATCH] infiniband/core: Fix a use after free in cm_work_handler

2021-03-11 Thread lyl2019
In the implementation of destory_cm_id(), it restores cm_id_priv by "cm_id_priv = container_of(cm_id, struct iwcm_id_private, id);". And the last line of destory_cm_id() calls "(void)iwcm_deref_id(cm_id_priv);" to free the cm_id_priv. > -原始邮件- > 发件人: "Leon Romanovsky" > 发送时间: 2021-03-1

Re: Re: [PATCH] greybus/operation: Drop reference when message has been set

2021-03-10 Thread lyl2019
Sorry, i mistakenly divided the patch into two commits. What i have sent is the latest commit which corrected my grammar in the patch. I will send the full patch soon. > -原始邮件- > 发件人: "Greg KH" > 发送时间: 2021-03-10 17:32:40 (星期三) > 收件人: "Lv Yunlong" > 抄送: jo...@kernel.org, el...@kernel.o