Re: [Drbd-dev] [PATCH] drbd: Fix a use after free in get_initial_state

On 4/1/21 1:57 PM, Lv Yunlong wrote: In get_initial_state, it calls notify_initial_state_done(skb,..) if cb->args[5]==1. I see that if genlmsg_put() failed in notify_initial_state_done(), the skb will be freed by nlmsg_free(skb). Then get_initial_state will goto out and the freed skb will be used

Re: Re: [Drbd-dev] [PATCH] drbd: Fix a use after free in get_initial_state

-...@lists.linbit.com > 主题: Re: [Drbd-dev] [PATCH] drbd: Fix a use after free in get_initial_state > > On 4/1/21 1:57 PM, Lv Yunlong wrote: > > In get_initial_state, it calls notify_initial_state_done(skb,..) if > > cb->args[5]==1. I see that if genlmsg_put() failed in > &g

Re: Re: Re: [Drbd-dev] [PATCH] drbd: Fix a use after free in get_initial_state

.@lists.linbit.com > 主题: Re: Re: [Drbd-dev] [PATCH] drbd: Fix a use after free in get_initial_state > > > > > > -原始邮件- > > 发件人: "Christoph Böhmwalder" > > 发送时间: 2021-04-01 21:01:20 (星期四) > > 收件人: "Lv Yunlong" >