While reading the code of bpf verifier, I found these two issues. Patch 1 move the bpf_prog_clone_free function into filter.h, so we can use it in other file. Patch 2 fix memleak in an error handling path in bpf_patch_insn_data function. Patch 3 fix a use after free in bpf_check function. He Fengqing (3): bpf: Move bpf_prog_clone_free into filter.h file bpf: Fix a memory leak in an error handling path in 'bpf_patch_insn_data()' bpf: Fix a use after free in bpf_check() include/linux/filter.h | 17 ++++++++++++- kernel/bpf/core.c | 27 +++++--------------- kernel/bpf/verifier.c | 58 ++++++++++++++++++++++++++++++++---------- net/core/filter.c | 2 +- 4 files changed, 68 insertions(+), 36 deletions(-) -- 2.25.1