From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 52EE339182A; Thu, 23 Apr 2026 19:10:56 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776971456; cv=none; b=pPBrpu+6qha4Sqp54DisqiizSQU6NqB6nOgKgaP4L1pVlFITwlGEWudQSG50XN0EBSxLKWD0l7GNeH7sk+RKhN0AAG9VrSQy7Wq09IckrPkFaoY8qvgKaZYp/p0agApnD6RH67Ewzmu9/Mv3YOvZq6wd2sDD9sJjIMH2kbooGAU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776971456; c=relaxed/simple; bh=6SGZbcsI37W5mNbIsWK/IxFSRNG5tDV0vfuw1Lv5Nnc=; h=Content-Type:MIME-Version:Subject:From:Message-Id:Date:References: In-Reply-To:To:Cc; b=M/syuC/9Fe9pFGqGm0mEEQs04w7M+AKMTNCl5Kq+lXniBsU/pSnXf4qAN7FMqimedAh6TxpE10H7OmgpsjbaXQf6k01DO3HEgRYEynzfifF8DSSuhngXbWKfIBlkhmTRO4zrMVIz/rxP5IiNqwVZPJW0xLeWGui55aux9wzTdjw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=T3QD459P; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="T3QD459P" Received: by smtp.kernel.org (Postfix) with ESMTPSA id E21B5C2BCAF; Thu, 23 Apr 2026 19:10:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1776971456; bh=6SGZbcsI37W5mNbIsWK/IxFSRNG5tDV0vfuw1Lv5Nnc=; h=Subject:From:Date:References:In-Reply-To:To:Cc:From; b=T3QD459PKrfs+NQyLDD+fC97K/AZ4b5/fgek2h480PGxIZYiwmnwR/OstDo2o342H 2xesb3oB+CY6dCufyKCyn90GOEQ6/oS15fP6GU+ZDWJWWEzObd0J63KTnY8VljDjvW uzfnWhc0Rd7nFlAyAjE4su2F0/wA1d9GOFaSmJqo/JcvJHDfXhUoOtCOM6L4asRGi8 pkouqggF/ZVdgHwgjHMk80rPsD3lzTUHPRS4LG0Rg0Muh7UflUQHPc1iFi60NFVGgs 1ukKSbP54rOqWth4NOCqOW83KZMwHtpkb2Pom8lIfEshLMHJJbcBiOJ66ZnBOtE2Vc hws8HsCQIzoig== Received: from [10.30.226.235] (localhost [IPv6:::1]) by aws-us-west-2-korg-oddjob-rhel9-1.codeaurora.org (Postfix) with ESMTP id 7CFCF3809A90; Thu, 23 Apr 2026 19:10:18 +0000 (UTC) Content-Type: text/plain; charset="utf-8" Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [PATCH v2 1/1] tipc: fix double-free in tipc_buf_append() From: patchwork-bot+netdevbpf@kernel.org Message-Id: <177697141705.724716.9960573430185428617.git-patchwork-notify@kernel.org> Date: Thu, 23 Apr 2026 19:10:17 +0000 References: <20260421124528.162996-1-lee@kernel.org> In-Reply-To: <20260421124528.162996-1-lee@kernel.org> To: Lee Jones Cc: jmaloy@redhat.com, davem@davemloft.net, edumazet@google.com, kuba@kernel.org, pabeni@redhat.com, horms@kernel.org, ying.xue@windriver.com, netdev@vger.kernel.org, tipc-discussion@lists.sourceforge.net, linux-kernel@vger.kernel.org, tung.quang.nguyen@est.tech Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski : On Tue, 21 Apr 2026 13:45:26 +0100 you wrote: > tipc_msg_validate() can potentially reallocate the skb it is validating, > freeing the old one. In tipc_buf_append(), it was being called with a > pointer to a local variable which was a copy of the caller's skb > pointer. > > If the skb was reallocated and validation subsequently failed, the error > handling path would free the original skb pointer, which had already > been freed, leading to double-free. > > [...] Here is the summary with links: - [v2,1/1] tipc: fix double-free in tipc_buf_append() https://git.kernel.org/netdev/net/c/d293ca716e7d You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html