From nobody Sun Feb 8 18:32:16 2026 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9EC24C001DF for ; Tue, 25 Jul 2023 21:46:53 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230043AbjGYVqw (ORCPT ); Tue, 25 Jul 2023 17:46:52 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:39296 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229448AbjGYVqu (ORCPT ); Tue, 25 Jul 2023 17:46:50 -0400 Received: from mail.ispras.ru (mail.ispras.ru [83.149.199.84]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 1E3B81FDD; Tue, 25 Jul 2023 14:46:49 -0700 (PDT) Received: from localhost.localdomain (unknown [46.242.14.200]) by mail.ispras.ru (Postfix) with ESMTPSA id 3EF0A40737C9; Tue, 25 Jul 2023 21:46:47 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 mail.ispras.ru 3EF0A40737C9 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ispras.ru; s=default; t=1690321607; bh=wQZ+lrRE3oQnyK31lwk/xK6Rt/iFePrIWTkSITlap1w=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=IapLk/WzMzB0LeUX1/U399YIXAH67f1o/o+ul/kZh3sDQszDWnGpRnvWqMQitoDL6 rj47I66xhQJk/BzORiThu7kwqOF2Hp1ocIhjFxYqINMdRypPVgFMQ8mZHN+u8TQ3c1 T15pDjqUfi8l/5xtFokIbvL0i7JzGS8LmNwODVRk= From: Fedor Pchelkin To: Jon Maloy Cc: Fedor Pchelkin , Ying Xue , "David S. Miller" , Eric Dumazet , Jakub Kicinski , Paolo Abeni , Xin Long , netdev@vger.kernel.org, tipc-discussion@lists.sourceforge.net, linux-kernel@vger.kernel.org, Alexey Khoroshilov , lvc-project@linuxtesting.org Subject: [PATCH v2] tipc: stop tipc crypto on failure in tipc_node_create Date: Wed, 26 Jul 2023 00:46:25 +0300 Message-ID: <20230725214628.25246-1-pchelkin@ispras.ru> X-Mailer: git-send-email 2.41.0 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Type: text/plain; charset="utf-8" If tipc_link_bc_create() fails inside tipc_node_create() for a newly allocated tipc node then we should stop its tipc crypto and free the resources allocated with a call to tipc_crypto_start(). As the node ref is initialized to one to that point, just put the ref on tipc_link_bc_create() error case that would lead to tipc_node_free() be eventually executed and properly clean the node and its crypto resources. Found by Linux Verification Center (linuxtesting.org). Fixes: cb8092d70a6f ("tipc: move bc link creation back to tipc_node_create") Suggested-by: Xin Long Signed-off-by: Fedor Pchelkin Reviewed-by: Xin Long --- v1->v2: simplify the patch per Xin Long's advice: putting the ref on error case would solve the problem more conveniently; update the patch description accordingly. net/tipc/node.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/tipc/node.c b/net/tipc/node.c index 5e000fde8067..a9c5b6594889 100644 --- a/net/tipc/node.c +++ b/net/tipc/node.c @@ -583,7 +583,7 @@ struct tipc_node *tipc_node_create(struct net *net, u32= addr, u8 *peer_id, n->capabilities, &n->bc_entry.inputq1, &n->bc_entry.namedq, snd_l, &n->bc_entry.link)) { pr_warn("Broadcast rcv link creation failed, no memory\n"); - kfree(n); + tipc_node_put(n); n =3D NULL; goto exit; } --=20 2.41.0