]> git.baikalelectronics.ru Git - kernel.git/commit
x86/ldt: Plug memory leak in error path
authorThomas Gleixner <tglx@linutronix.de>
Sun, 31 Dec 2017 10:24:34 +0000 (11:24 +0100)
committerIngo Molnar <mingo@kernel.org>
Sun, 31 Dec 2017 11:14:07 +0000 (12:14 +0100)
commit7dd381ba35a21226d8669522414cfdf87909aff8
tree08f6eb7b4cbaf2e658c072714a8f95346f44c2ce
parent1404828eccb3c5a9c5a3e4b115dac6e7bc993c07
x86/ldt: Plug memory leak in error path

The error path in write_ldt() tries to free 'old_ldt' instead of the newly
allocated 'new_ldt', resulting in a memory leak. It also misses to clean up a
half populated LDT pagetable, which is not a leak as it gets cleaned up
when the process exits.

Free both the potentially half populated LDT pagetable and the newly
allocated LDT struct. This can be done unconditionally because once an LDT
is mapped subsequent maps will succeed, because the PTE page is already
populated and the two LDTs fit into that single page.

Reported-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Cc: Dominik Brodowski <linux@dominikbrodowski.net>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Linus Torvalds <torvalds@linuxfoundation.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Fixes: c25b612ae99e ("x86/pti: Put the LDT in its own PGD if PTI is on")
Link: http://lkml.kernel.org/r/alpine.DEB.2.20.1712311121340.1899@nanos
Signed-off-by: Ingo Molnar <mingo@kernel.org>
arch/x86/kernel/ldt.c