Skip to contentSkip to conversation

Use after free in cnxk_ethdev

DPDK/ethdev Bug 1554 [email protected] 1 participant 2 messages Sep 27, 2024 – Oct 16, 2024

lore
Share & tools
lore
#0 lore raw

https://bugs.dpdk.org/show_bug.cgi?id=1554

            Bug ID: 1554
           Summary: Use after free in cnxk_ethdev
           Product: DPDK
           Version: 24.11
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: major
          Priority: Normal
         Component: ethdev
          Assignee: [email protected]
          Reporter: [email protected]

Target Milestone: ---

If GCC malloc function tracing attributes are added, the the following error is detected at compile time:

../drivers/net/cnxk/cnxk_ethdev_sec.c: In function ‘cnxk_nix_inl_custom_meta_pool_cb’:
../drivers/common/cnxk/roc_platform.h:196:32: warning: pointer ‘hp’ used after ‘rte_mempool_free’ [-Wuse-after-free]
196 | #define plt_free rte_free
../drivers/net/cnxk/cnxk_ethdev_sec.c:140:17: note: in expansion of macro ‘plt_free’

  140 |                 plt_free(hp->pool_config);
      |                 ^~~~~~~~
../drivers/net/cnxk/cnxk_ethdev_sec.c:139:17: note: call to ‘rte_mempool_free’
here
  139 |                 rte_mempool_free(hp);
      |                 ^~~~~~~~~~~~~~~~~~~~
Signature · 2 lines
You are receiving this mail because:
You are the assignee for the bug.
#1 lore raw

https://bugs.dpdk.org/show_bug.cgi?id=1554

Thomas Monjalon ([email protected]) changed:

What |Removed |Added
----------------------------------------------------------------------------

         Resolution|---                         |FIXED
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #1 from Thomas Monjalon ([email protected]) --- Resolved in http://git.dpdk.org/dpdk/commit/?id=c024de1793

Signature · 2 lines
You are receiving this mail because:
You are the assignee for the bug.