RE: [PATCH] x86/mce: Avoid using object after free in genpool.

2016-03-23 Thread Luck, Tony
> Acked-by: Borislav Petkov Thanks > I have a couple more RAS patches for tip, want me to pick that one up > too? I'm going to send my pile to tip guys after -rc1 is out. Yes please ... throw this one on the pile. -Tony

Re: [PATCH] x86/mce: Avoid using object after free in genpool.

2016-03-23 Thread Borislav Petkov
On Wed, Mar 23, 2016 at 09:14:40AM -0700, Tony Luck wrote: > When we loop over all queued machine check error records to pass > them to the registered notifiers we use llist_for_each_entry(). > But the loop calls gen_pool_free() for the entry in the body of > the loop - and then the iterator looks

[PATCH] x86/mce: Avoid using object after free in genpool.

2016-03-23 Thread Tony Luck
When we loop over all queued machine check error records to pass them to the registered notifiers we use llist_for_each_entry(). But the loop calls gen_pool_free() for the entry in the body of the loop - and then the iterator looks at node->next after the free. Use llist_for_each_entry_safe() inst