Unverified Commit 75f68071 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!11869 VMCI: Fix use-after-free when removing resource in vmci_resource_remove() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhang Kunbo <zhangkunbo@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/BZWGCPVEJHVVPNH34NUNANJC23JD4FON/ 
 
https://gitee.com/src-openeuler/kernel/issues/IARY1L 
 
Link:https://gitee.com/openeuler/kernel/pulls/11869

 

Reviewed-by: default avatarZhang Jianhua <chris.zjh@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parents 7a5a3100 24975f95

drivers/misc/vmw_vmci/vmci_resource.c

+2 −1
Original line number Diff line number Diff line
@@ -144,7 +144,8 @@ void vmci_resource_remove(struct vmci_resource *resource) 
	spin_lock(&vmci_resource_table.lock);



	hlist_for_each_entry(r, &vmci_resource_table.entries[idx], node) {

		if (vmci_handle_is_equal(r->handle, resource->handle)) {

		if (vmci_handle_is_equal(r->handle, resource->handle) &&

		    resource->type == r->type) {

			hlist_del_init_rcu(&r->node);

			break;

		}