Unverified Commit 515984f1 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!11860 VMCI: Fix use-after-free when removing resource in vmci_resource_remove() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhang Kunbo <zhangkunbo@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/7TVEKSWBBUFSJVV66AMHDNHMYNFHOP52/ 
 
https://gitee.com/src-openeuler/kernel/issues/IARY1L 
 
Link:https://gitee.com/openeuler/kernel/pulls/11860

 

Reviewed-by: default avatarZhang Jianhua <chris.zjh@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 86fd1c8c ace033e3

drivers/misc/vmw_vmci/vmci_resource.c

+2 −1
Original line number Diff line number Diff line
@@ -144,7 +144,8 @@ void vmci_resource_remove(struct vmci_resource *resource) 
	spin_lock(&vmci_resource_table.lock);



	hlist_for_each_entry(r, &vmci_resource_table.entries[idx], node) {

		if (vmci_handle_is_equal(r->handle, resource->handle)) {

		if (vmci_handle_is_equal(r->handle, resource->handle) &&

		    resource->type == r->type) {

			hlist_del_init_rcu(&r->node);

			break;

		}