diff options
| author | Ryan Mehri <ryan.mehri1@gmail.com> | 2026-08-22 23:33:43 -0400 |
|---|---|---|
| committer | Leon Romanovsky <leon@kernel.org> | 2026-09-02 09:25:30 -0400 |
| commit | 99c24a8968ebef0573825b5cb89d5985d51635b9 (patch) | |
| tree | 226d43757efc86636e6b54a84adde5a498ec4f84 /scripts/Makefile.thinlto | |
| parent | 6c368f7baaea63c1c7c28c6df271511f2a1562c9 (diff) | |
| download | linux-99c24a8968ebef0573825b5cb89d5985d51635b9.tar.gz linux-99c24a8968ebef0573825b5cb89d5985d51635b9.zip | |
RDMA/rtrs: guard against null kobj name
In the client, if `init_path()` errors, the callee tries to clean up
with `rtrs_clt_close_conns()`. However, this can lead to calling the
event tracing code with `clt_path->kobj->name` being `NULL` and thus
causing a null pointer dereference when trying to copy from it.
This just adds a guard to check that the name is not `NULL` before
copying from it. The server appears to have a similar pattern.
Fixes: 5a93929d9f9a1 ("RDMA/rtrs-clt: Add event tracing support")
Fixes: c16762b7bf54d ("RDMA/rtrs-srv: Add event tracing support")
Reported-by: syzbot+1695193198994f4e7fed@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=1695193198994f4e7fed
Signed-off-by: Ryan Mehri <ryan.mehri1@gmail.com>
Link: https://patch.msgid.link/20260823034303.163403-1-ryan.mehri1@gmail.com
Reviewed-by: Jack Wang <jinpu.wang@cloud.ionos.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions