mirror of
https://github.com/torvalds/linux.git
synced 2026-10-07 05:31:08 -04:00
binary_sysctl(): fix memory leak
binary_sysctl() calls sysctl_getname() which allocates from names_cache slab usin __getname() The matching function to free the name is __putname(), and not putname() which should be used only to match getname() allocations. This is because when auditing is enabled, putname() calls audit_putname *instead* (not in addition) to __putname(). Then, if a syscall is in progress, audit_putname does not release the name - instead, it expects the name to get released when the syscall completes, but that will happen only if audit_getname() was called previously, i.e. if the name was allocated with getname() rather than the naked __getname(). So, __getname() followed by putname() ends up leaking memory. Signed-off-by: Michel Lespinasse <[email protected]> Acked-by: Al Viro <[email protected]> Cc: Christoph Hellwig <[email protected]> Cc: Eric Paris <[email protected]> Cc: <[email protected]> Signed-off-by: Andrew Morton <[email protected]> Signed-off-by: Linus Torvalds <[email protected]>
This commit is contained in:
1 parent
0006526d78
commit
3d3c8f93a2
1 file changed
+1
-1
@@ -1354,7 +1354,7 @@ static ssize_t binary_sysctl(const int *name, int nlen,
|
||||
|
||||
fput(file);
|
||||
out_putname:
|
||||
putname(pathname);
|
||||
__putname(pathname);
|
||||
out:
|
||||
return result;
|
||||
}
|
||||
|
||||
Reference in new issue
Block a user