[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-hams
Subject:    Re: Re: [PATCH] drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
From:       周多明 <duoming () zju ! edu ! cn>
Date:       2022-02-17 2:47:44
Message-ID: cbb5412.b171f.17f05941412.Coremail.duoming () zju ! edu ! cn
[Download RAW message or body]

Hello,

Thank you very much for your time and pointing out problems in my patch.
I have sent the modified patch again just now.

We use pty to simulate 6pack device, the released resource is tty_struct->tty_port
in tty layer. 

The free trace is shown as below:
tty_release()->tty_release_struct()->release_tty()->tty_kref_put()->
queue_release_one_tty()->release_one_tty()->pty_cleanup()->tty_port_put(tty->port);

The use trace is shown as below:
sp_xmit_on_air()->pty_write()->tty_flip_buffer_push()->tty_schedule_flip(port);


Best wishes,
Duoming Zhou


[prev in list] [next in list] [prev in thread] [next in thread]