Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   "lizhijian@fujitsu.com" <lizhijian@fujitsu.com>
To:     Bart Van Assche <bvanassche@acm.org>,
        Hillf Danton <hdanton@sina.com>
CC:     Mike Christie <michael.christie@oracle.com>,
        Jason Gunthorpe <jgg@ziepe.ca>,
        Leon Romanovsky <leon@kernel.org>,
        "linux-rdma@vger.kernel.org" <linux-rdma@vger.kernel.org>,
        "target-devel@vger.kernel.org" <target-devel@vger.kernel.org>,
        open list <linux-kernel@vger.kernel.org>
Subject: Re: use-after-free in srpt_enable_tpg()
Thread-Topic: use-after-free in srpt_enable_tpg()
Thread-Index: AQHYifTbGPwwktyxoEmpbdMcUWz8s61jdG6AgAS34ACAACIxgIAAegIAgALpJoCAAD7MgIAA1WWAgACbl4CAAduUgIAif9cA
Date:   Wed, 27 Jul 2022 03:24:36 +0000
Message-ID: <63b37fec-3b32-dbd0-175f-ab7f6aa3dbdf@fujitsu.com>
References: <17649b9c-7e42-1625-8bc9-8ad333ab771c@fujitsu.com>
 <ed7e268e-94c5-38b1-286d-e2cb10412334@acm.org>
 <fbaca135-891c-7ff3-d7ac-bd79609849f5@oracle.com>
 <20220701015934.1105-1-hdanton@sina.com>
 <20220703021119.1109-1-hdanton@sina.com>
 <20220704001157.1644-1-hdanton@sina.com>
 <a671867f-153c-75a4-0f58-8dcb0d4f9c19@acm.org>
In-Reply-To: <a671867f-153c-75a4-0f58-8dcb0d4f9c19@acm.org>
Accept-Language: en-US, zh-CN
Content-Language: en-US
user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101
 Thunderbird/91.11.0
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?V3A5SExBVUZJcitIdnhxM3cxeHQraEZaOTlyR2w0K3M5S045bVJLakdYbFgv?=
 =?utf-8?B?S0x6MVFrdTJQbDFMQmtiUGFtUHVVTFMxTWpKUXdpYjY3MVg3OWg1U3FWeGNP?=
 =?utf-8?B?QUJVZnVidVJvaElNUVRvaWJYVW9WanVRRU1HYlNON3VuNHl6RkZLTk10S0VD?=
 =?utf-8?B?Y0dGM1huR3BPZUY5UWNEVjBmZHpuc3daOHpYNmZuVDI1M2Z6TjE1OXRsVVBN?=
 =?utf-8?B?WXo5TStQVGNNZ0Y5TStSUGdyMUlZOStkUS9tRVY1QWs4QnByQjYrcy9uZ1dl?=
 =?utf-8?B?OGNJTEpSOHJiSnZmYldSUnB1b3ZUb08zUGdWdlBkSU1tSFo0NmVRYUtESkJE?=
 =?utf-8?B?dWI4OXRPamdWQ0NBY0Q5Ky9MYmJoQnl6VHhtbzlyb3RtNG5PMFN0R3dDQlBm?=
 =?utf-8?B?N0VGaHdSYXdocHFrVUhnYVBnbE01RDB5cUxYQjladDdQalRGUkYzSk9IOGVW?=
 =?utf-8?B?R2M0Z0FqUCtWblRBcmtvL1FZVmxweEp6QlNGTm85enEyQW5GS0MxS1NZYUMv?=
 =?utf-8?B?Qi8zY0lQemNUZUtvdzJCcUFBWHpkNDVERTVGd0RQQUVLMGhEMEt4K2NSNWRZ?=
 =?utf-8?B?ODdUTnZuRHQ3d2hTWVlJbXNpT1dVcEJIa3ZyZytLRXFqcXJoSSt6bnQ2cEhz?=
 =?utf-8?B?VndKZms2Uk1iNWF5NEJwM01MRVdzd1ZBb2tEbmdqWFpkbEJXOUttUERiTTdn?=
 =?utf-8?B?bjRJMlRidmhIMW4wbmYxR2xKejdZV3RuT1pxZkMxUEZyVkdxdEdSZC9Qbkly?=
 =?utf-8?B?eFJCckpOUGJEcS9sNGVDS1lwclZjRnFNSUxOTE5kOElJZWd2NGx1bm9zNFgx?=
 =?utf-8?B?WVBPbkFmRVRROWxVdHlOcVVaNnIxbklCUUR5cGh3MW9uTCtwZ0tiNk9aZndt?=
 =?utf-8?B?MkxRZ0xObUNUSFUvTXp4WU1lVFgxNlpybzZVTnU0OXVHSVFhTENtT21zZ2tp?=
 =?utf-8?B?cWtlNVNlVlNiT1gyVlBnTk94TVB6dEN1a0hMNkUybStRRllobFNTajhHMlc5?=
 =?utf-8?B?WkRpUUc5ZW15UHpDaE5CdThnc0pwdE5oQmFGUUNMMGcrcndtYmpqSE5Yem01?=
 =?utf-8?B?WnlOT285SXlHQlJVSnliYmxoeHU4S1ZUSkovSVhuV0V0VXBpN2p1NXlsSVp2?=
 =?utf-8?B?WGdIYXJSVnZqUWp1akhXcnN4dWQrU1VESmV4am9GRGxrSjRjbDEyaU4zb0xt?=
 =?utf-8?B?NzJONUh0NjA4SVBOUHhLWlBHL21OU1EyL1ZscEVzVnNpZVRmOUE5ZU9ReFhY?=
 =?utf-8?B?QWQraGc2cnFuaU1FZjRjbjhHZzJKYlVaNE9kSDRiY09FTkVUbytLQmtWZ3pn?=
 =?utf-8?B?WlhpWU9YN1p5S2RiYW9hSVRQTFdzNmgyZlNLTWt5RkdwL0hWVmIxYXdBQUt2?=
 =?utf-8?B?bElXSnBFQW5JTVhnRGVtcGwzaUdMVCswYkZwbFVmOTdTOU5naVllQzFPZWMz?=
 =?utf-8?B?UnlrNXp6azg1VnBPaGVJUFpxQ0taYmo1WmlqcHUrZHUzeTNXa0lkdzRuQ2lJ?=
 =?utf-8?B?cVFDSFFlNGV2NXlBM2I1ckVZR0xoWnRzRUlZZFVCL0JxWHNncTZRamdTQmRB?=
 =?utf-8?B?ZTdxdnZTUHhPcFk0U24rOWZCQ0ZPMEZoYnRMTTdqTjFDMjAreS9welE0WG9y?=
 =?utf-8?B?c1dkS1RESnplME1jSFZ2UFloMXZ3MHJURFEzUEhKSHBGeFk5czV2bjJtN1Ny?=
 =?utf-8?B?Ny9MclJTZHVJeDk4OC9lTG9ybnFVV0xDNE5oUHJBRFJrYmxQS3pKaEViOGp5?=
 =?utf-8?B?OVVaWGtEelM2d05VN096Si9SRmNLWDYrekUzaEJNd3FkN2hzK1NlTnVucTJn?=
 =?utf-8?B?VndoZFQ4dWFEWU95NVFRbzBrYzkxeDBSUnZWQURxVlo4bDFQTVN3UHVTYkxZ?=
 =?utf-8?B?R01CSW1xcjl4TjFrYXZiOXFTazdyK1pVQitWdU5oWHhkUkg5VjI1M1o1eHVy?=
 =?utf-8?B?ZndUZzlQKzZsR0Zwam1LcjRBcEk0YldQS1dIOWNtWHVoaERwK052RW5Vb3B2?=
 =?utf-8?B?Z3NMWGdROEthL3pvTUxIb2FpaFdyV2ExajJUSkI3d09YMnVUQjVHSWZDYWR4?=
 =?utf-8?B?SnFabzdiM0tsZ1VodTkzRWptQXFyZ1dCcC9YdjJ2S294K0ZSbGYxK01kZ0ZN?=
 =?utf-8?B?RHdjNUo0NEVNT0Q2QVc4SFlRd0ZqL2NxZmpiMXVJUE5nY0R2MGhRQnRQaFYv?=
 =?utf-8?B?V0E9PQ==?=
Content-Type: text/plain; charset="utf-8"
Content-ID: <99E7E922849F654D9D7CE91D3F09FAC1@jpnprd01.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: fujitsu.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: TYWPR01MB9311.jpnprd01.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 9138b111-773a-43c5-2e6a-08da6f7f8864
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Jul 2022 03:24:36.5830
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: a19f121d-81e1-4858-a9d8-736e267fd4c7
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: PAXVezN1fyUhyEU9dgNcR6GH9iKjtWXsat1oedJqR4Jz2r05nN4+meDBVypbnybZPxu8o3h0apkChEMn/RckLQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSZPR01MB8451
X-Spam-Status: No, score=-4.4 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A,RCVD_IN_DNSWL_MED,
        SPF_HELO_PASS,SPF_NONE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

QmFydCwNCg0KDQpPbiAwNS8wNy8yMDIyIDEyOjM0LCBCYXJ0IFZhbiBBc3NjaGUgd3JvdGU6DQo+
DQo+IEEgcG90ZW50aWFsIHNvbHV0aW9uIGNvdWxkIGJlIHRvIGRlY291cGxlIHRoZSBsaWZldGlt
ZXMgb2YgdGhlIGRhdGEgc3RydWN0dXJlcyB1c2VkIGZvciBjb25maWdmcyAoc3RydWN0IHNlX3d3
biBhbmQgc3RydWN0IHNycHRfdHBnKSBhbmQgdGhlIGRhdGEgc3RydWN0dXJlcyBhc3NvY2lhdGVk
IHdpdGggUkRNQSBvYmplY3RzIChzdHJ1Y3Qgc3JwdF9wb3J0KS4gSWYgbm9ib2R5IGVsc2UgYmVh
dHMgbWUgdG8gdGhpcyBJIHdpbGwgdHJ5IHRvIGZpbmQgdGhlIHRpbWUgdG8gaW1wbGVtZW50IHRo
aXMgYXBwcm9hY2guIA0KDQpJIHNhdyB5b3VyIGFwcHJvYWNoIHRoaXMgbW9ybmluZywgaSB3aWxs
IGhhdmUgYSBsb29rIGFuZCB0ZXN0cyBsYXRlci4NCg0KVGhhbmtzDQpaaGlqaWFu