Skip to contentSkip to conversation

[2.4] binfmt_elf memleak (fix)

PATCH Oleg Drokin 1 participant 1 message Apr 22, 2003

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

Hello!

Some time ago I have found a memleak in binfmt_elf.c in 2.5, that was quickly fixed by Andrew Morton. The same problem is present in current 2.4 tree. Andrew's fix applies to 2.4 with a little fuzz and the result looks correct to me. Consider applying following patch (against latest 2.4 bk tree).

Bye,
Oleg

===== fs/binfmt_elf.c 1.21 vs edited =====

fs/binfmt_elf.c +4 -6
@@ -375,7 +375,6 @@
 	unsigned long text_data, elf_entry = ~0UL;
 	char * addr;
 	loff_t offset;
-	int retval;
 
 	current->mm->end_code = interp_ex->a_text;
 	text_data = interp_ex->a_text + interp_ex->a_data;
@@ -397,11 +396,9 @@
 	}
 
 	do_brk(0, text_data);
-	retval = -ENOEXEC;
 	if (!interpreter->f_op || !interpreter->f_op->read)
 		goto out;
-	retval = interpreter->f_op->read(interpreter, addr, text_data, &offset);
-	if (retval < 0)
+	if (interpreter->f_op->read(interpreter, addr, text_data, &offset) < 0)
 		goto out;
 	flush_icache_range((unsigned long)addr,
 	                   (unsigned long)addr + text_data);
@@ -607,7 +604,7 @@
 	retval = setup_arg_pages(bprm);
 	if (retval < 0) {
 		send_sig(SIGKILL, current, 0);
-		return retval;
+		goto out_free_dentry;
 	}
 	
 	current->mm->start_stack = bprm->p;
@@ -711,7 +708,8 @@
 			printk(KERN_ERR "Unable to load interpreter\n");
 			kfree(elf_phdata);
 			send_sig(SIGSEGV, current, 0);
-			return 0;
+			retval = -ENOEXEC; /* Nobody gets to see this, but.. */
+			goto out;
 		}
 	}