On Tue, 8 Oct 2019 12:31:43 +0200, Jiri Pirko wrote:
> From: Jiri Pirko <j...@mellanox.com>
>
> Individual dumpit ops (start, dumpit, done) are locked by genl_lock
> for if !family->parallel_ops. However, multiple
> genl_family_rcv_msg_dumpit() calls may in in flight in parallel.
> Each has a separate struct genl_dumpit_info allocated
> but they share the same family->attrbuf. Fix this by allocating separate
> memory for attrs for dumpit ops, for non-parallel_ops (for parallel_ops
> it is done already).
>
> Reported-by: syzbot+495688b736534bb6c...@syzkaller.appspotmail.com
> Reported-by: syzbot+ff59dc711f2cff879...@syzkaller.appspotmail.com
> Reported-by: syzbot+dbe02e13bcce52bcf...@syzkaller.appspotmail.com
> Reported-by: syzbot+9cb7edb2906ea1e83...@syzkaller.appspotmail.com
> Fixes: bf813b0afeae ("net: genetlink: parse attrs and store in contect info
> struct during dumpit")
> Signed-off-by: Jiri Pirko <j...@mellanox.com>
Dropped the comma at the end of the subject and s/for if/if/,
and applied :) Thanks!
