Received: by 2002:ac2:464d:0:0:0:0:0 with SMTP id s13csp3287797lfo; Mon, 23 May 2022 00:46:32 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyF3eGXGw43o/59572/KSN2wM13KULmqjJ+5/3Z9P7nq/0jlROrY+absoSm2EBDlSovsHIk X-Received: by 2002:a17:902:6846:b0:161:5b6f:8995 with SMTP id f6-20020a170902684600b001615b6f8995mr21763636pln.66.1653291992635; Mon, 23 May 2022 00:46:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1653291992; cv=none; d=google.com; s=arc-20160816; b=t1zW1Xdgf1zA/GGkFoO2tJoPMuywhRfZfr4P0ng2SCJ/7R0Dq2EsnvhLfRIl10Im3x AhMdzqL2V72V7XCgafVvzOwR2K0bi8217rmQ2S7WwzCwhebNk1w8OJV/2WUxP5beLWuI wNVzNdnWbzI9cGDF/ttw+rtWBfCFudGIpmMzgrtBidnQf7YZPVCg/fj2GGydRv0jdYNx gVRH1T/VcYVnUPuki0RGs21F9R1Xt1Ah6A+fS9WIMNQ1vqvswMa3cjgFQFs5LBao28zt IyeDk1MmzqE9S1BmB/KpilpIDKQ51M681LKoKsRiPCwzVBWnoTbZB2e2T6LWysO2Zhan z1aw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:mime-version :dkim-signature; bh=BgikS+FD68kYSqbiCR2/IjVUgexnyJ8rdyhsXWcQ0aM=; b=O7OR1L20+dvFq1xqFe1g8lqDSd6/GBKqN4foHml06Etje+Lv08F7nzgW9oXID9cDjf FSK3FfrFPcbY5Y5TVv5OsuHxW5Q4UsjDklNWYhnKSEPnI66zxEq1Frrtft3WKZnuyd6t d0qB6JG+F67eIWUldjrhftwWylzXA2kkiDB65BFyAXVjlAKIBdnCEf6f0NmKa8YnQ+W/ UkIWgyC32VZXrdC5rF8rCgd+kw/wZpBuJJ7kPF4tunK2Sr/Y8w4ywt1CFLwgekpxgkWq yHQSMFSuLTwsq1/VAugYFwHcJfeqrp5tJvwmaadktWqEWHg1QArdW6GaIyud+GgsN/HZ GC6g== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=oq34Liz3; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from lindbergh.monkeyblade.net (lindbergh.monkeyblade.net. [2620:137:e000::1:18]) by mx.google.com with ESMTPS id e63-20020a636942000000b003a9f9703091si8744311pgc.338.2022.05.23.00.46.31 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 23 May 2022 00:46:32 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) client-ip=2620:137:e000::1:18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=oq34Liz3; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by lindbergh.monkeyblade.net (Postfix) with ESMTP id C6A3F54016; Sun, 22 May 2022 23:51:04 -0700 (PDT) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1353129AbiEULsY (ORCPT + 99 others); Sat, 21 May 2022 07:48:24 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:39596 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231287AbiEULsS (ORCPT ); Sat, 21 May 2022 07:48:18 -0400 Received: from mail-pl1-x62c.google.com (mail-pl1-x62c.google.com [IPv6:2607:f8b0:4864:20::62c]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id DECE75F27C; Sat, 21 May 2022 04:48:17 -0700 (PDT) Received: by mail-pl1-x62c.google.com with SMTP id w3so2690133plp.13; Sat, 21 May 2022 04:48:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:from:date:message-id:subject:to:cc; bh=BgikS+FD68kYSqbiCR2/IjVUgexnyJ8rdyhsXWcQ0aM=; b=oq34Liz3tSGXMGm2kchBFttiAM3MqDkP08MsKHpP8RCQzUouVCmf+H7ognvcHXnD9x ymQ5IGkE45KIvift7C4nO8UvyWM8AUOkwUOvoy44YB/ha6DOkDEPStmFkr8aG3D81Hf+ x0OP0MqLiKTk6UqXjw4ex+vMawVZotF4651ACiwRga4BGnn9oSwztPhPPCqg/dgz3/st q33heDOOVH46XxRY5frTdOzhWos0+Fv6Hdh5aEfh/koKVWx1xHGdeAYiMsg8ENExotot cW5aNyuq8VzgrAMXUpeqIK1AGDurKspCWZ+3L73o/0Y1rlNZK74oJuGBC+e8c/3qOegs OKeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=BgikS+FD68kYSqbiCR2/IjVUgexnyJ8rdyhsXWcQ0aM=; b=nUG9oNyjO45R/M1XSVP+gtU2WYGIIteV94M1CSWWjXxxfEuLj8pn+Jzs5MGjfsn4DK llBnm3M/WXtTvOl3s0osxpfeSuhn+HWycNrz8KDgetoi+Klaj14YvFh574iW+MWj5rGy VJVXzcsF3JDkypkL8LZvQr1xXn7x8PL819qmZzPM2VRP53MEi/475Mzwwia7Od8WUG1Q plsis+oVgm1SAJTYQkoPrKyGKT1tcmWIQttc186J22ro20P7vbo5J9S9KQ3JPW3JvTjh bwnvIfO8yUxS0n7sMyVjhuFnW2pymYtyftWVINm08B7GTywGzrfhpGaGgybVyTcnlmG4 XXvg== X-Gm-Message-State: AOAM533u6yH5rPzueWZX4eg3FjuQfwY7AZsijLTR8IU9mUqLsPNCiflE 0A++Up0MxA06STh/ZvfKPGtpfqGSBwS+wnjG6A== X-Received: by 2002:a17:90b:2318:b0:1df:af66:1e8 with SMTP id mt24-20020a17090b231800b001dfaf6601e8mr15887140pjb.240.1653133697418; Sat, 21 May 2022 04:48:17 -0700 (PDT) MIME-Version: 1.0 From: Zheyu Ma Date: Sat, 21 May 2022 19:48:06 +0800 Message-ID: Subject: [BUG] atm: idt77252: Found a bug when removing the module To: 3chas3@gmail.com Cc: linux-atm-general@lists.sourceforge.net, netdev@vger.kernel.org, Linux Kernel Mailing List Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-1.7 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,RDNS_NONE, SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello, I found a bug in the driver idt77252, when removing the module, I got the following flaw: [ 14.576507] BUG: KASAN: use-after-free in idt77252_interrupt+0xfde/0x13c0 [idt77252] [ 14.576980] Read of size 8 at addr ffff88800a428008 by task modprobe/292 [ 14.578516] Call Trace: [ 14.580577] idt77252_interrupt+0xfde/0x13c0 [idt77252] The bug occurs in line 2770, I guess that the reason is that the driver free the irq too late. Zheyu Ma