Hello:
This patch was applied to bpf/bpf.git (master)
by Martin KaFai Lau <martin.lau@xxxxxxxxxx>:
On Wed, 9 Aug 2023 16:28:43 +0200 you wrote:
> From: Magnus Karlsson <magnus.karlsson@xxxxxxxxx>
>
> Fix a refcount underflow problem reported by syzbot that can happen
> when a system is running out of memory. If xp_alloc_tx_descs() fails,
> and it can only fail due to not having enough memory, then the error
> path is triggered. In this error path, the refcount of the pool is
> decremented as it has incremented before. However, the reference to
> the pool in the socket was not nulled. This means that when the socket
> is closed later, the socket teardown logic will think that there is a
> pool attached to the socket and try to decrease the refcount again,
> leading to a refcount underflow.
>
> [...]
Here is the summary with links:
- [bpf] xsk: fix refcount underflow in error path
https://git.kernel.org/bpf/bpf/c/85c2c79a0730
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
