Re: [PATCH v2] ipmi: Prevent use-after-free in deliver_response

2019-01-20 Thread Fred Klassen
Correct, targeting 5.0. > On Jan 19, 2019, at 5:30 PM, Corey Minyard wrote: > > I assume you want this for 5.0., right?

Re: [PATCH v2] ipmi: Prevent use-after-free in deliver_response

2019-01-19 Thread Corey Minyard
On 1/19/19 4:28 PM, Fred Klassen wrote: Some IPMI modules (e.g. ibmpex_msg_handler()) will have ipmi_usr_hdlr handlers that call ipmi_free_recv_msg() directly. This will essentially kfree(msg), leading to use-after-free. This does not happen in the ipmi_devintf module, which will queue the messa

[PATCH v2] ipmi: Prevent use-after-free in deliver_response

2019-01-19 Thread Fred Klassen
Some IPMI modules (e.g. ibmpex_msg_handler()) will have ipmi_usr_hdlr handlers that call ipmi_free_recv_msg() directly. This will essentially kfree(msg), leading to use-after-free. This does not happen in the ipmi_devintf module, which will queue the message and run ipmi_free_recv_msg() later. BU