Received: by 2002:a6b:fb09:0:0:0:0:0 with SMTP id h9csp728771iog; Thu, 30 Jun 2022 09:03:54 -0700 (PDT) X-Google-Smtp-Source: AGRyM1uKbLI8jxX+2NHASYgesnFd6D/Q7USuK839KBEUYwIYH+AhGM52c+WHCLpz7Ju3b8YOoPmj X-Received: by 2002:a05:6402:201:b0:431:665f:11f1 with SMTP id t1-20020a056402020100b00431665f11f1mr12611163edv.378.1656605034249; Thu, 30 Jun 2022 09:03:54 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1656605034; cv=none; d=google.com; s=arc-20160816; b=DdegS4mdFr0aMqejFVLS80Y2OoogVjLnJKwTnu+xRXOg7/NUxaI6y+LpywMJrOPwV4 9JdXMPZEifHGTrjLVelbDn7RcZugpRgcgTSbw+nEH83RPK6XekWdvWEaqgPhtQfMkss3 +AIPw31hkihctchp4H5XHK5lgYx2ClN/8DUqXFBQmlbdpy+HS1thWQSCgu5iDGl2D/2k SzDDR917T/pTjXlRX675UlM9GKookvxuIyArrLG4cyTyx2TNxQG0lI8WDwq9e5ulxJxp Vq8VpACrLHvpgq2UITQuvCcxUiBMV1e8Y3ltIa8CDPA6bm5J2j13+l5zw4Y4dGDgm0sv vEjw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:message-id:mime-version :content-transfer-encoding:references:in-reply-to:subject:cc:to:from :date; bh=/3Q3JM9PfjZGd2IbOpV4n19LWLJ5tK4mAs0H71EphZU=; b=n1jVGfzM0VFyXh0qScvaTULMYgZG0u/4Zjm1pKsMyg6nYHaZ9XUoMEC8zUw0CYEgPB ddvgFMFLDsyXu16cBOKIeXDG5cm6yrdGHuH5/CmrCZtLgFE6PNuMNmgFY2vX3+aNARDY sKYS/jKq9hnl53GFUPb6e5VfmStnUaCGnX721dsJdSTmy/zJWfSb7edYouTUN4UgfTIs 9+X6vO5fjB0tMUPmxVngcyvrniL6QvXqQAzWaHrSSbwgOy42+xeWii+6drjO5+O1yFHt maG1U1ypTUGTYpBQa5NHVjBx0w4uDJNR6ry7aHQLaw6CNGOxpFpntGHefEeolniyqAcZ 9MXQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id sd21-20020a1709076e1500b006feb8cc7e2asi10316532ejc.503.2022.06.30.09.03.26; Thu, 30 Jun 2022 09:03:54 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235789AbiF3Pvs (ORCPT + 99 others); Thu, 30 Jun 2022 11:51:48 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:59964 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234996AbiF3Pvl (ORCPT ); Thu, 30 Jun 2022 11:51:41 -0400 Received: from azure-sdnproxy-1.icoremail.net (azure-sdnproxy.icoremail.net [52.237.72.81]) by lindbergh.monkeyblade.net (Postfix) with SMTP id 5356235851; Thu, 30 Jun 2022 08:51:36 -0700 (PDT) Received: by ajax-webmail-mail-app4 (Coremail) ; Thu, 30 Jun 2022 23:51:21 +0800 (GMT+08:00) X-Originating-IP: [221.192.178.120] Date: Thu, 30 Jun 2022 23:51:21 +0800 (GMT+08:00) X-CM-HeaderCharset: UTF-8 From: duoming@zju.edu.cn To: "Eric Dumazet" Cc: linux-hams@vger.kernel.org, netdev , LKML , "Paolo Abeni" , "Jakub Kicinski" , "David Miller" , "Ralf Baechle" Subject: Re: [PATCH net] net: rose: fix UAF bug caused by rose_t0timer_expiry X-Priority: 3 X-Mailer: Coremail Webmail Server Version XT5.0.13 build 20210104(ab8c30b6) Copyright (c) 2002-2022 www.mailtech.cn zju.edu.cn In-Reply-To: References: <20220630143842.24906-1-duoming@zju.edu.cn> Content-Transfer-Encoding: base64 Content-Type: text/plain; charset=UTF-8 MIME-Version: 1.0 Message-ID: <55ffc892.1ea21.181b54f4b2f.Coremail.duoming@zju.edu.cn> X-Coremail-Locale: zh_CN X-CM-TRANSID: cS_KCgC3PiF6xr1izobiAg--.64601W X-CM-SenderInfo: qssqjiasttq6lmxovvfxof0/1tbiAgoRAVZdtaeongAAs3 X-Coremail-Antispam: 1Ur529EdanIXcx71UUUUU7IcSsGvfJ3iIAIbVAYjsxI4VWxJw CS07vEb4IE77IF4wCS07vE1I0E4x80FVAKz4kxMIAIbVAFxVCaYxvI4VCIwcAKzIAtYxBI daVFxhVjvjDU= X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org SGVsbG8sCgpPbiBUaHUsIDMwIEp1biAyMDIyIDE3OjE3OjEwICswMjAwIEVyaWMgRHVtYXpldCB3 cm90ZToKCj4gPiA+ID4gVGhlcmUgYXJlIFVBRiBidWdzIGNhdXNlZCBieSByb3NlX3QwdGltZXJf ZXhwaXJ5KCkuIFRoZQo+ID4gPiA+IHJvb3QgY2F1c2UgaXMgdGhhdCBkZWxfdGltZXIoKSBjb3Vs ZCBub3Qgc3RvcCB0aGUgdGltZXIKPiA+ID4gPiBoYW5kbGVyIHRoYXQgaXMgcnVubmluZyBhbmQg dGhlcmUgaXMgbm8gc3luY2hyb25pemF0aW9uLgo+ID4gPiA+IE9uZSBvZiB0aGUgcmFjZSBjb25k aXRpb25zIGlzIHNob3duIGJlbG93Ogo+ID4gPiA+Cj4gPiA+ID4gICAgICh0aHJlYWQgMSkgICAg ICAgICAgICAgfCAgICAgICAgKHRocmVhZCAyKQo+ID4gPiA+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHwgcm9zZV9kZXZpY2VfZXZlbnQKPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICB8ICAgcm9zZV9ydF9kZXZpY2VfZG93bgo+ID4gPiA+ICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHwgICAgIHJvc2VfcmVtb3ZlX25laWdoCj4gPiA+ID4gcm9zZV90MHRpbWVyX2V4cGly eSAgICAgICAgfCAgICAgICByb3NlX3N0b3BfdDB0aW1lcihyb3NlX25laWdoKQo+ID4gPiA+ICAg Li4uICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICBkZWxfdGltZXIoJm5laWdoLT50MHRp bWVyKQo+ID4gPiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICBrZnJlZShy b3NlX25laWdoKSAvL1sxXUZSRUUKPiA+ID4gPiAgIG5laWdoLT5kY2VfbW9kZSAvL1syXVVTRSB8 Cj4gPiA+ID4KPiA+ID4gPiBUaGUgcm9zZV9uZWlnaCBpcyBkZWFsbG9jYXRlZCBpbiBwb3NpdGlv biBbMV0gYW5kIHVzZSBpbgo+ID4gPiA+IHBvc2l0aW9uIFsyXS4KPiA+ID4gPgo+ID4gPiA+IFRo ZSBjcmFzaCB0cmFjZSB0cmlnZ2VyZWQgYnkgUE9DIGlzIGxpa2UgYmVsb3c6Cj4gPiA+ID4KPiA+ ID4gPiBCVUc6IEtBU0FOOiB1c2UtYWZ0ZXItZnJlZSBpbiBleHBpcmVfdGltZXJzKzB4MTQ0LzB4 MzIwCj4gPiA+ID4gV3JpdGUgb2Ygc2l6ZSA4IGF0IGFkZHIgZmZmZjg4ODAwOWIxOTY1OCBieSB0 YXNrIHN3YXBwZXIvMC8wCj4gPiA+ID4gLi4uCj4gPiA+ID4gQ2FsbCBUcmFjZToKPiA+ID4gPiAg PElSUT4KPiA+ID4gPiAgZHVtcF9zdGFja19sdmwrMHhiZi8weGVlCj4gPiA+ID4gIHByaW50X2Fk ZHJlc3NfZGVzY3JpcHRpb24rMHg3Yi8weDQ0MAo+ID4gPiA+ICBwcmludF9yZXBvcnQrMHgxMDEv MHgyMzAKPiA+ID4gPiAgPyBleHBpcmVfdGltZXJzKzB4MTQ0LzB4MzIwCj4gPiA+ID4gIGthc2Fu X3JlcG9ydCsweGVkLzB4MTIwCj4gPiA+ID4gID8gZXhwaXJlX3RpbWVycysweDE0NC8weDMyMAo+ ID4gPiA+ICBleHBpcmVfdGltZXJzKzB4MTQ0LzB4MzIwCj4gPiA+ID4gIF9fcnVuX3RpbWVycysw eDNmZi8weDRkMAo+ID4gPiA+ICBydW5fdGltZXJfc29mdGlycSsweDQxLzB4ODAKPiA+ID4gPiAg X19kb19zb2Z0aXJxKzB4MjMzLzB4NTQ0Cj4gPiA+ID4gIC4uLgo+ID4gPiA+Cj4gPiA+ID4gVGhp cyBwYXRjaCBjaGFuZ2VzIGRlbF90aW1lcigpIGluIHJvc2Vfc3RvcF90MHRpbWVyKCkgYW5kCj4g PiA+ID4gcm9zZV9zdG9wX2Z0aW1lcigpIHRvIGRlbF90aW1lcl9zeW5jKCkgaW4gb3JkZXIgdGhh dCB0aGUKPiA+ID4gPiB0aW1lciBoYW5kbGVyIGNvdWxkIGJlIGZpbmlzaGVkIGJlZm9yZSB0aGUg cmVzb3VyY2VzIHN1Y2ggYXMKPiA+ID4gPiByb3NlX25laWdoIGFuZCBzbyBvbiBhcmUgZGVhbGxv Y2F0ZWQuIEFzIGEgcmVzdWx0LCB0aGUgVUFGCj4gPiA+ID4gYnVncyBjb3VsZCBiZSBtaXRpZ2F0 ZWQuCj4gPiA+ID4KPiA+ID4gPiBGaXhlczogMWRhMTc3ZTRjM2Y0ICgiTGludXgtMi42LjEyLXJj MiIpCj4gPiA+ID4gU2lnbmVkLW9mZi1ieTogRHVvbWluZyBaaG91IDxkdW9taW5nQHpqdS5lZHUu Y24+Cj4gPiA+ID4gLS0tCj4gPiA+ID4gIG5ldC9yb3NlL3Jvc2VfbGluay5jIHwgNCArKy0tCj4g PiA+ID4gIDEgZmlsZSBjaGFuZ2VkLCAyIGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCj4g PiA+ID4KPiA+ID4gPiBkaWZmIC0tZ2l0IGEvbmV0L3Jvc2Uvcm9zZV9saW5rLmMgYi9uZXQvcm9z ZS9yb3NlX2xpbmsuYwo+ID4gPiA+IGluZGV4IDhiOTZhNTZkM2E0Li45NzM0ZDEyNjRkZSAxMDA2 NDQKPiA+ID4gPiAtLS0gYS9uZXQvcm9zZS9yb3NlX2xpbmsuYwo+ID4gPiA+ICsrKyBiL25ldC9y b3NlL3Jvc2VfbGluay5jCj4gPiA+ID4gQEAgLTU0LDEyICs1NCwxMiBAQCBzdGF0aWMgdm9pZCBy b3NlX3N0YXJ0X3QwdGltZXIoc3RydWN0IHJvc2VfbmVpZ2ggKm5laWdoKQo+ID4gPiA+Cj4gPiA+ ID4gIHZvaWQgcm9zZV9zdG9wX2Z0aW1lcihzdHJ1Y3Qgcm9zZV9uZWlnaCAqbmVpZ2gpCj4gPiA+ ID4gIHsKPiA+ID4gPiAtICAgICAgIGRlbF90aW1lcigmbmVpZ2gtPmZ0aW1lcik7Cj4gPiA+ID4g KyAgICAgICBkZWxfdGltZXJfc3luYygmbmVpZ2gtPmZ0aW1lcik7Cj4gPiA+ID4gIH0KPiA+ID4K PiA+ID4gQXJlIHlvdSBzdXJlIHRoaXMgaXMgc2FmZSA/Cj4gPiA+Cj4gPiA+IGRlbF90aW1lcl9z eW5jKCkgY291bGQgaGFuZyBpZiB0aGUgY2FsbGVyIGhvbGRzIGEgbG9jayB0aGF0IHRoZSB0aW1l cgo+ID4gPiBmdW5jdGlvbiB3b3VsZCBuZWVkIHRvIGFjcXVpcmUuCj4gPgo+ID4gSSB0aGluayB0 aGlzIGlzIHNhZmUuIFRoZSByb3NlX2Z0aW1lcl9leHBpcnkoKSBpcyBhbiBlbXB0eSBmdW5jdGlv biB0aGF0IGlzCj4gPiBzaG93biBiZWxvdzoKPiA+Cj4gPiBzdGF0aWMgdm9pZCByb3NlX2Z0aW1l cl9leHBpcnkoc3RydWN0IHRpbWVyX2xpc3QgKnQpCj4gPiB7Cj4gPiB9Cj4gPgo+ID4gPiA+Cj4g PiA+ID4gIHZvaWQgcm9zZV9zdG9wX3QwdGltZXIoc3RydWN0IHJvc2VfbmVpZ2ggKm5laWdoKQo+ ID4gPiA+ICB7Cj4gPiA+ID4gLSAgICAgICBkZWxfdGltZXIoJm5laWdoLT50MHRpbWVyKTsKPiA+ ID4gPiArICAgICAgIGRlbF90aW1lcl9zeW5jKCZuZWlnaC0+dDB0aW1lcik7Cj4gPiA+ID4gIH0K PiA+ID4KPiA+ID4gU2FtZSBoZXJlLCBwbGVhc2UgZXhwbGFpbiB3aHkgaXQgaXMgc2FmZS4KPiA+ Cj4gPiBUaGUgcm9zZV9zdG9wX3QwdGltZXIoKSBtYXkgaG9sZCAicm9zZV9ub2RlX2xpc3RfbG9j ayIgYW5kICJyb3NlX25laWdoX2xpc3RfbG9jayIsCj4gPiBidXQgdGhlIHRpbWVyIGhhbmRsZXIg cm9zZV90MHRpbWVyX2V4cGlyeSgpIHRoYXQgaXMgc2hvd24gYmVsb3cgZG9lcyBub3QgbmVlZAo+ ID4gdGhlc2UgdHdvIGxvY2tzLgo+ID4KPiA+IHN0YXRpYyB2b2lkIHJvc2VfdDB0aW1lcl9leHBp cnkoc3RydWN0IHRpbWVyX2xpc3QgKnQpCj4gPiB7Cj4gPiAgICAgICAgIHN0cnVjdCByb3NlX25l aWdoICpuZWlnaCA9IGZyb21fdGltZXIobmVpZ2gsIHQsIHQwdGltZXIpOwo+ID4KPiA+ICAgICAg ICAgcm9zZV90cmFuc21pdF9yZXN0YXJ0X3JlcXVlc3QobmVpZ2gpOwo+ID4KPiA+ICAgICAgICAg bmVpZ2gtPmRjZV9tb2RlID0gMDsKPiA+Cj4gPiAgICAgICAgIHJvc2Vfc3RhcnRfdDB0aW1lcihu ZWlnaCk7Cj4gCj4gVGhpcyB3aWxsIHJlYXJtIHRoZSB0aW1lci4gIGRlbF90aW1lcl9zeW5jKCkg d2lsbCBub3QgaGVscC4KClRoYW5rIHlvdSBmb3IgeW91ciB0aW1lLCBidXQgSSBkb24ndCB0aGlu ayBzby4KCj4gUGxlYXNlIHJlYWQgdGhlIGNvbW1lbnQgaW4gZnJvbnQgb2YgZGVsX3RpbWVyX3N5 bmMoKSwgaW4ga2VybmVsL3RpbWUvdGltZXIuYwoKSSB3cm90ZSBhIGtlcm5lbCBtb2R1bGUgdG8g dGVzdCB3aGV0aGVyIGRlbF90aW1lcl9zeW5jKCkgY291bGQgZmluaXNoIGEgdGltZXIgaGFuZGxl cgp0aGF0IHVzZSBtb2RfdGltZXIoKSB0byByZXdpbmQgaXRzZWxmLiBUaGUgZm9sbG93aW5nIGlz IHRoZSByZXN1bHQuCgojIGluc21vZCBkZWxfdGltZXJfc3luYy5rbyAKWyAgOTI5LjM3NDQwNV0g bXlfdGltZXIgd2lsbCBiZSBjcmVhdGUuClsgIDkyOS4zNzQ3MzhdIHRoZSBqaWZmaWVzIGlzIDo0 Mjk1NTk1NTcyClsgIDkzMC40MTE1ODFdIEluIG15X3RpbWVyX2Z1bmN0aW9uClsgIDkzMC40MTE5 NTZdIHRoZSBqaWZmaWVzIGlzIDQyOTU1OTY2MDkKWyAgOTM1LjQ2NjY0M10gSW4gbXlfdGltZXJf ZnVuY3Rpb24KWyAgOTM1LjQ2NzUwNV0gdGhlIGppZmZpZXMgaXMgNDI5NTYwMTY2NQpbICA5NDAu NTg2NTM4XSBJbiBteV90aW1lcl9mdW5jdGlvbgpbICA5NDAuNTg2OTE2XSB0aGUgamlmZmllcyBp cyA0Mjk1NjA2Nzg0ClsgIDk0NS43MDY1NzldIEluIG15X3RpbWVyX2Z1bmN0aW9uClsgIDk0NS43 MDY4ODVdIHRoZSBqaWZmaWVzIGlzIDQyOTU2MTE5MDQKCiMgCiMgcm1tb2QgZGVsX3RpbWVyX3N5 bmMua28KWyAgOTQ4LjUwNzY5Ml0gdGhlIGRlbF90aW1lcl9zeW5jIGlzIDoxClsgIDk0OC41MDc2 OTJdIAojIAojIAoKVGhlIHJlc3VsdCBvZiB0aGUgZXhwZXJpbWVudCBzaG93cyB0aGF0IHRoZSB0 aW1lciBoYW5kbGVyIGNvdWxkCmJlIGtpbGxlZCBhZnRlciB3ZSBleGVjdXRlIGRlbF90aW1lcl9z eW5jKCksIGV2ZW4gaWYgdGhlIHRpbWVyIGNvdWxkCnJld2luZCBpdHNlbGYuCgpCZXN0IHJlZ2Fy ZHMsCkR1b21pbmcgWmhvdQ==