]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
bpf: fix memory leak in lpm_trie map_free callback function
authorYonghong Song <yhs@fb.com>
Thu, 8 Mar 2018 12:16:43 +0000 (13:16 +0100)
committerSeth Forshee <seth.forshee@canonical.com>
Thu, 15 Mar 2018 13:28:56 +0000 (08:28 -0500)
commit3a1234feac927d77cd1896da189c04747610a593
treed98e005c11642c9f7919caac4ff8a0557a344fcb
parent8ee233488edffab83a2880d5e1cb740cc39bac3d
bpf: fix memory leak in lpm_trie map_free callback function

BugLink: http://bugs.launchpad.net/bugs/1755275
[ upstream commit 9a3efb6b661f71d5675369ace9257833f0e78ef3 ]

There is a memory leak happening in lpm_trie map_free callback
function trie_free. The trie structure itself does not get freed.

Also, trie_free function did not do synchronize_rcu before freeing
various data structures. This is incorrect as some rcu_read_lock
region(s) for lookup, update, delete or get_next_key may not complete yet.
The fix is to add synchronize_rcu in the beginning of trie_free.
The useless spin_lock is removed from this function as well.

Fixes: b95a5c4db09b ("bpf: add a longest prefix match trie map implementation")
Reported-by: Mathieu Malaterre <malat@debian.org>
Reported-by: Alexei Starovoitov <ast@kernel.org>
Tested-by: Mathieu Malaterre <malat@debian.org>
Signed-off-by: Yonghong Song <yhs@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
kernel/bpf/lpm_trie.c