On Wed, Aug 26, 2020 at 7:00 PM Kees Cook <keescook@xxxxxxxxxxxx> wrote: > On Wed, Aug 26, 2020 at 05:33:47PM +0200, Greg KH wrote: > > On Wed, Aug 26, 2020 at 05:02:38PM +0200, Marek Szyprowski wrote: > > > On 26.08.2020 15:43, Greg KH wrote: ... > > Why is slub.c erroring? How is this related to freeing memory? > > I assume this is related to the size calculations in the VLA macros... > nothing _looks_ wrong with that patch, but obviously something is. :) > Hmmm What about the idea I have shared above? (summary: different scope of two offset variables, and thus outer one is always 0) -- With Best Regards, Andy Shevchenko