Re: [RFC PATCH 01/14] mm/slub: don't try to dereference invalid freepointers

2023-09-30 Thread Hyeonggon Yoo
On Fri, Sep 15, 2023 at 7:59 PM Matteo Rizzo wrote: > > slab_free_freelist_hook tries to read a freelist pointer from the > current object even when freeing a single object. This is invalid > because single objects don't actually contain a freelist pointer when > they're freed and the memory conta

Re: [RFC PATCH 01/14] mm/slub: don't try to dereference invalid freepointers

2023-09-15 Thread Kees Cook
On Fri, Sep 15, 2023 at 10:59:20AM +, Matteo Rizzo wrote: > slab_free_freelist_hook tries to read a freelist pointer from the > current object even when freeing a single object. This is invalid > because single objects don't actually contain a freelist pointer when > they're freed and the memor

[RFC PATCH 01/14] mm/slub: don't try to dereference invalid freepointers

2023-09-15 Thread Matteo Rizzo
slab_free_freelist_hook tries to read a freelist pointer from the current object even when freeing a single object. This is invalid because single objects don't actually contain a freelist pointer when they're freed and the memory contains other data. This causes problems for checking the integrity