Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932998AbbFJADM (ORCPT ); Tue, 9 Jun 2015 20:03:12 -0400 Received: from mail-pd0-f177.google.com ([209.85.192.177]:35415 "EHLO mail-pd0-f177.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752619AbbFJAC7 (ORCPT ); Tue, 9 Jun 2015 20:02:59 -0400 Date: Wed, 10 Jun 2015 09:03:03 +0900 From: Minchan Kim To: Sergey Senozhatsky Cc: Andrew Morton , linux-mm@kvack.org, linux-kernel@vger.kernel.org, Sergey Senozhatsky Subject: Re: [PATCH] zsmalloc: fix a null pointer dereference in destroy_handle_cache() Message-ID: <20150610000303.GA13376@bgram> References: <1433502690-2524-1-git-send-email-sergey.senozhatsky@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1433502690-2524-1-git-send-email-sergey.senozhatsky@gmail.com> User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 570 Lines: 13 On Fri, Jun 05, 2015 at 08:11:30PM +0900, Sergey Senozhatsky wrote: > zs_destroy_pool()->destroy_handle_cache() invoked from > zs_create_pool() can pass a NULL ->handle_cachep pointer > to kmem_cache_destroy(), which will dereference it. > > Signed-off-by: Sergey Senozhatsky Thanks, Sergey! -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/