Received: by 2002:a25:683:0:0:0:0:0 with SMTP id 125csp627695ybg; Wed, 3 Jun 2020 09:26:08 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxJnIrnm0O2x9C+hlmKfRAjfKB6k7gu/Rdui6XCtbMKsexFwr4ueufgnmNKHI/ddS4zHL1G X-Received: by 2002:a17:906:7e50:: with SMTP id z16mr81184ejr.277.1591201568046; Wed, 03 Jun 2020 09:26:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1591201568; cv=none; d=google.com; s=arc-20160816; b=YwNSm5BuK9aCEG0LWn0hV/ZcDmzJv8HpCaj95HjvHAnZgNidyiaDpUgJ1ZUJbiHJdN EyzAnvAkaRWam5m/pDp9bTNJD6mAVBAGUwWtEFewLFb6hJPebatBUiymp4Wvc6sGfDU3 /LpWpJ7xDBI/eBHDe1QTIvvdnofWQyhnlZI+a0vcu0Asx5fPDeBsTIGjgNnz6dV36ccA +X01KzDEnoD4t2Drv0proScVd8t6kqz1zXpqKhz5BvJ30BqOMfzMfQHVuseBx2PMW6sE b+gGhdg4YH3ANL25q5Sy5z2i5kfuttkiy/anApc2gsLFCL0BmgVcJt5BuDJOHpt+sW5N R2zw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=cQzWmDpi1wJWr0RAlK2/sz80AqOXD8xVaJIwnGR0WlI=; b=eA0JBUyjfKaA8OkqORMrA8TZBQIHTlqTkQjT3PWsZaAWsLf8vZGuR8oSeuN1i51xPZ rtJyTD7M6N9Krpo8UvPGZaA6vmC+YGXV/4HiJ4M0bkZdM+tplwNPVELz1CeoyWA0OrFc 8/2tGeOXiEDZEE6SetwayEQL/bhhZZwTaZcOEWL27sjI3MGJ7Kfv+ZZkIcsZpNw9soCp T+rD4mA0bE52fVdpqN0wHlE046gmpguMcaaxUDWcgltHlSLz4WKigk1jH+sxuz4F0MTw fxp3CgGo3/QtZdmqG+HqCO9ZLQQcIHJWy0Wu8k6irqgO/S40s/jo2Ckh57CTDXo1tJv9 yqTw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=ohUB6XRm; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id n6si15425eda.5.2020.06.03.09.25.44; Wed, 03 Jun 2020 09:26:08 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=ohUB6XRm; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726146AbgFCQVa (ORCPT + 99 others); Wed, 3 Jun 2020 12:21:30 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:45654 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726088AbgFCQVa (ORCPT ); Wed, 3 Jun 2020 12:21:30 -0400 Received: from mail-il1-x142.google.com (mail-il1-x142.google.com [IPv6:2607:f8b0:4864:20::142]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id E3822C08C5C0; Wed, 3 Jun 2020 09:21:29 -0700 (PDT) Received: by mail-il1-x142.google.com with SMTP id z2so3107884ilq.0; Wed, 03 Jun 2020 09:21:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cQzWmDpi1wJWr0RAlK2/sz80AqOXD8xVaJIwnGR0WlI=; b=ohUB6XRm86g2of7JgBVG2MU0BLZ0blpmOnYXK3ZXp8oSse4caksO/C+X67LsiwT1c/ PdPRhORlmR9BQNUEDt8RLgIPepqCraQkWZN+J/3pAB2D1xNDIV4perqgDx0gEdKrf446 4Mych9a3o8xREmPYtEcF6rr1Z6nzBxyRH30UXpqyKJajb88IRVfYOuLUDxyFu/PQtSKO GYYdl51AsOskRKzDj2OcstIL9Sx0c3lQapUfLmRpFJ5j9WQNP7FQGmlBE8FUbD+Hl4SR 6nmme5G8WpmXolqwVoxOWC3N7COBg/IuTzVxTIDVwQ1eCOYkeugKQVFT+udtUMBOTlez Cq4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cQzWmDpi1wJWr0RAlK2/sz80AqOXD8xVaJIwnGR0WlI=; b=iAnWbClJTi49WdLmimelhmLMT876u5m8pV5PdVTGJ39C5HQoQyMV0scQZyLEYQOWec 1/ENjbyV+kjUttyiXDRVt0Zwk8zmPerJe9WhxaJVUz4FSIAraC3SmNXRBRm5kQTcO+/f XWpy+4UUOsxwp8v+sAaiRwA0rsWxIks0gBO9PnJOciVvxKFTd5R9UbPUPT2Ws6B+ym/b MUP45Fd87x1I7KQzOTLl64BPkxaWFLu4ky88ClK2/yAYPbx8wVHEX2d8B+d7Z79DaAYA Sg/l93DJfJu4IzcTfBWOAQ6ayUPpBzHW3C3+1a4wXnpRjlD0Ncd72msKl4kmJqsli64t WDuw== X-Gm-Message-State: AOAM5326Tpsf2Z/NENie4PsNXNJFet9uVmsRq047yYYKDsUevL7YkPT/ ScabTQyv7u3xA3dNysUk6/zuHxQaq/c6QL5cTbY= X-Received: by 2002:a92:2a0c:: with SMTP id r12mr261189ile.275.1591201289370; Wed, 03 Jun 2020 09:21:29 -0700 (PDT) MIME-Version: 1.0 References: <20200603154559.140418-1-colin.king@canonical.com> <1edc291d-6e63-89d8-d48c-443908ddc0e8@canonical.com> In-Reply-To: <1edc291d-6e63-89d8-d48c-443908ddc0e8@canonical.com> From: Amir Goldstein Date: Wed, 3 Jun 2020 19:21:18 +0300 Message-ID: Subject: Re: [PATCH][next] ovl: fix null pointer dereference on null stack pointer on error return To: Colin Ian King Cc: Miklos Szeredi , overlayfs , kernel-janitors@vger.kernel.org, linux-kernel Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Jun 3, 2020 at 7:15 PM Colin Ian King wrote: > > On 03/06/2020 17:11, Amir Goldstein wrote: > > On Wed, Jun 3, 2020 at 6:46 PM Colin King wrote: > >> > >> From: Colin Ian King > >> > >> There are two error return paths where the call to path_put is > >> dereferencing the null pointer 'stack'. Fix this by avoiding the > >> error exit path via label 'out_err' that will lead to the path_put > >> calls and instead just return the error code directly. > >> > >> Addresses-Coverity: ("Dereference after null check)" > >> Fixes: 4155c10a0309 ("ovl: clean up getting lower layers") > >> Signed-off-by: Colin Ian King > > > > > > Which branch is that based on? > > Doesn't seem to apply to master nor next > > It was based on today's linux-next Oh, I'm behind. Sorry for the noise. Thanks, Amir.