Received: by 2002:a05:6a10:f347:0:0:0:0 with SMTP id d7csp1354317pxu; Sat, 5 Dec 2020 12:54:19 -0800 (PST) X-Google-Smtp-Source: ABdhPJyaVH9Y/KZPwMng38hCQ4tcW9pzOmO7tJEhkfzpjelqRVtXy7WmzILRSvxMS2TU7EG28uV7 X-Received: by 2002:a50:fb97:: with SMTP id e23mr13727696edq.208.1607201659675; Sat, 05 Dec 2020 12:54:19 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1607201659; cv=none; d=google.com; s=arc-20160816; b=IgH4quw5KYVNBpt26PUjWoZSUSpYTCvcq7ZaIVbGizv17j3ISK5Bf7HJCoZLkfYwKe u+mPWopFYVmlYqDMuc/O5vdR7o6P6DGiBnf83GDQIBoKyJDxUSJnEqhu+RE7xRmdRXNj qYI4nABpknruscIdwQxMgFTDxKidS26377I1H+6i/zp+yFV1fyEIby8Ryr6wMB8PtyGc in2uP9BYVvYizqkpoL6KqGlt0GRmylxNSr7QdH3nvsFFvdtbyXRJvFVNi/BbyCk5udMF 8h6KOUlLk6MRkGgB2j1NeOx/c++829V0qlIc2+buZKF3d2OvcWH2arp3I238uBiSskeJ flCg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:subject:cc:to:from:dkim-signature :date; bh=1rcBexreeuwD3sWP+ec/G+37PW6Z4zfn6qGmlHbFVvQ=; b=vvgU3P+y9aHSOFb4NFAsyqMj5S4d7ne1ypjg9h9kFzBpWHR1U5VTFH5B+qPmYlDmi9 3GWgcM7IpVtpmw2zNNKi4DE4PJAk7hIr1q56pMNb5CMWBfGmqJvP58UWBPxylGaEBaSi ehzismnZ1NNHjFPgBOiMn0MinxGKZMJZn8xUOaA+xET/5gKZSuDcV0WUjd0E1zi8aQR+ Ek+rwfeFw+LU9kdOwa/ZRN53qerVaDvFKmwqeH2zcZvBZjuRek32HLqLJ65PcO8H9EgG bpaKHOI6g+LU5mN8TRPNPXrSk/Y6fY526OlDrr9/a5H0k7vyHTFtEPcLSvXtUJydmQNr 9Hrw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=b5YMJNMC; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id q23si3999887eja.104.2020.12.05.12.53.56; Sat, 05 Dec 2020 12:54:19 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=b5YMJNMC; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726250AbgLEUtl (ORCPT + 99 others); Sat, 5 Dec 2020 15:49:41 -0500 Received: from mail.kernel.org ([198.145.29.99]:53440 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725270AbgLEUtl (ORCPT ); Sat, 5 Dec 2020 15:49:41 -0500 Date: Sat, 5 Dec 2020 12:48:59 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1607201340; bh=Z/co9+Pvv4I2LEXBmRkaa+SbLCbOTc8rgFmjC1Xh5BE=; h=From:To:Cc:Subject:In-Reply-To:References:From; b=b5YMJNMCZCfyg5q1n2W38CE2FJV1cE/SGuJQswCsFwAHd2DZZuSwp96xp+6VFOO5H +0NENDzKlpibTPJOLOIputW6E1ygv8HL009zzQqLN7KRildM1ok2bWEcKCiNWWNmLi BeUdnTEBQQNXrZx1kgjBXiP6dD9/m0OXJyEC8BUDxmrUJIdZG64C1ccMPNAwTYdXmj rjWSftpNvlepD/9lW0YGcfl8jiKhmxeyL5WyvMds9a95Wp/4gkCYQsbPUft7i8agE9 8ElUQIUu2NO0tzKtBdW7UqswCC7+tjGIWimSTGgyIEm/SAi4yYJlnY+COwrxod9c/x XRqQSevUDRDNQ== From: Jakub Kicinski To: Rasmus Villemoes Cc: Li Yang , "David S. Miller" , Zhao Qiang , Vladimir Oltean , netdev@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH 11/20] ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() Message-ID: <20201205124859.60d045e6@kicinski-fedora-pc1c0hjn.DHCP.thefacebook.com> In-Reply-To: <20201205191744.7847-12-rasmus.villemoes@prevas.dk> References: <20201205191744.7847-1-rasmus.villemoes@prevas.dk> <20201205191744.7847-12-rasmus.villemoes@prevas.dk> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, 5 Dec 2020 20:17:34 +0100 Rasmus Villemoes wrote: > - unregister_netdev(dev); > - free_netdev(dev); > ucc_geth_memclean(ugeth); > if (of_phy_is_fixed_link(np)) > of_phy_deregister_fixed_link(np); > of_node_put(ugeth->ug_info->tbi_node); > of_node_put(ugeth->ug_info->phy_node); > + unregister_netdev(dev); > + free_netdev(dev); Are you sure you want to move the unregister_netdev() as well as the free?