From nobody Mon Feb 9 05:14:19 2026 Received: from mail-pl1-f169.google.com (mail-pl1-f169.google.com [209.85.214.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 920A9274B23 for ; Sat, 15 Nov 2025 13:41:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.169 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1763214112; cv=none; b=qcdJz2sQGoviYNwAWVGH29cno9HUZTtSJZi1akclia221nLOqL64cO7P+BNqJnXvU89+QfTmyq0FxtgDJxKJuI6zZrFstYZjZ99XRfsJQvyo8UeEIS8D8z5XufGZxEHE0/3pF4ZNoLqF4YvBgoawoLTizQReBLI+pEFPiMtSpDQ= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1763214112; c=relaxed/simple; bh=2g+Ig9rajCSJQdPS5HN+sWyz1uVJcolY62QNF/qsOF8=; h=From:Date:Subject:MIME-Version:Content-Type:Message-Id:To:Cc; b=NQ3l/9augfLxVV5meARJHL8AdGhi0dwIEK2xqgnCmhrthJIRm5/BqfdI1Ws80rfDUb98v8koD4ac2UxAPHAb8m6ZboXDUwSiFQfSRcMdX1RSTmdVOmSxduyBMQ6qjXbvkJHkhb8JWY9Y5fWy856M+gxBtOcnx4VlZujB6hAsTfA= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Vrwmjsv3; arc=none smtp.client-ip=209.85.214.169 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Vrwmjsv3" Received: by mail-pl1-f169.google.com with SMTP id d9443c01a7336-297e264528aso29269175ad.2 for ; Sat, 15 Nov 2025 05:41:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1763214110; x=1763818910; darn=vger.kernel.org; h=cc:to:message-id:content-transfer-encoding:mime-version:subject :date:from:from:to:cc:subject:date:message-id:reply-to; bh=vCuOKcivklTw1LxrDCwl7m8QKs9eVupotLkb+wFRGfA=; b=Vrwmjsv3rxUATFJavLauucU+gryqAIgaNZ9GcADd9B6qD+D1iwLTO6lqplQb4KSpYI u4nei6BMji4vPoCKfABrj6R4UfA7lAP5UYSeNwqx19qCUTaxC3fA3LNn7NwA3j0W0RXc c0mchsdmJP77uiUn1NP5Pb2DvH3F+5cb3XUpWoxVB828WBVfj6bRrekHY6oCtWWCC+do qqzU0vis5pC0j8DUOCJF1CxWx+USZJXCY/UNmFYMcE1VJWrkNIabynC9OVUbpFpa9ns3 lKnrtGHg3k8IzfiL9SxYHaYlGJPykKlscx2Hf3gIjPRrXMqaRVyP+xJCXmJhb1iDUfup YFlA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763214110; x=1763818910; h=cc:to:message-id:content-transfer-encoding:mime-version:subject :date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=vCuOKcivklTw1LxrDCwl7m8QKs9eVupotLkb+wFRGfA=; b=lBOqRlZf/JndawNxmoTHOLSKwCR+aDBsiTuU+WxmBIcESzbtQ3L/fpzlcE+Lm25ilr 3dSW3+8JH6x9R5Ceivx0GDG05R8zot1LZ+0qFNcReaCA0//IHtqnQ5fCnwNm12EhO/9A BmYbjfqPngPSl8e8gPSaRv+ZfyAx7B/eTuoDJNoTgoZGNIe7IIgXEzHLpxaamtFCOg+q aXN5ktk0C6SiWEpWrugYWUHUl4eWIJWKc8HJMjylM/F+vnlAqQCvJL5/ScXOnoR5pTYF 514HilbFUeagiXUT80Nc68NjMALEd4UCiuAcceUIp84L9ePcwh/OFL7/VVBXuIl0rNSE Z8QA== X-Forwarded-Encrypted: i=1; AJvYcCUx2bgptdu4Pp2DJYUQ0hOXzGSno3b7jwz2Y/JdWWSHziqUhnRrUSNOvJdQuHN2CmkHoWImy/u9oAUpRjk=@vger.kernel.org X-Gm-Message-State: AOJu0YxPv3uXm80RQmFoqEZUaWzSrvHiNBbxxp27d+29+8QkXfJpCFue I+4FVAzaj+qWSq0G8O22eTPPhtocn3lEWf4oWlaE0ueYt28ioVZux20K8+H36Q== X-Gm-Gg: ASbGncukNo3xNnEP0kMJAKSqR0vMa1SuSKJbMBRkqS+MWJoKCKOrS1slU0Sy8NaDnIY oV9NTHsaHpmBgoB2AffcWZy0VTDNN4Gxr7gvxZL8TDNgI4cqjFKqhL/23L5G43j//R4yydsUrBF i6wGji28/zIXNLfU+umqym8dyih0WwtGVuM9kLmOcdAGM0LCXPND5y6R5LoMj5WrBYsBikjYQPf s3S6xd4oelIzl2n7jVKBcJtwx0bYIPnGHj/VH0tO4TignlPvy9lEfgvRsG7Dd22SphdMB2X9C+s X/XgtCBVY8aIZr0s1uJEubGubREhkNIw3nZkSdh7aHGtKOP0HtCcW8LQaKKJ2klUXTrFBMkRANG Th7DdAYB3+HfZon+5XyfnOkFzV5JyC7fc3wsxg3qNvQoNNaKLN8/VlExXbE9JAy/UQpPzIBkvtQ == X-Google-Smtp-Source: AGHT+IF54Re3ExzoazVcf8AZ8foNwyuzuy1McXXtSzG3Eaxo/eWEkrctnQvsUBeuHFdTTfqmxM62sg== X-Received: by 2002:a17:903:3586:b0:288:5d07:8a8f with SMTP id d9443c01a7336-2986a6d7a64mr69752785ad.24.1763214110435; Sat, 15 Nov 2025 05:41:50 -0800 (PST) Received: from aheev.home ([106.215.173.137]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-bc36e8a58cfsm7410316a12.10.2025.11.15.05.41.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 15 Nov 2025 05:41:49 -0800 (PST) From: Ally Heev Date: Sat, 15 Nov 2025 19:11:27 +0530 Subject: [PATCH v2] overlayfs: fix uninitialized pointers with free attribute Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Message-Id: <20251115-aheev-uninitialized-free-attr-overlayfs-v2-1-815a48767340@gmail.com> X-B4-Tracking: v=1; b=H4sIAAaDGGkC/5XNQQ7CIBCF4as0rB1TENC68h6mC2yn7SQtGEBib bi72Bu4/N/ifRsL6AkDu1Yb85gokLMlxKFi3WTsiEB9aSZqoTivFZgJMcHLkqVIZqYP9jB4RDA xenAJ/WzWIYC+nE+NllI0WLPy9vQ40HuX7m3piUJ0ft3hxH/r/0biwEEblFpIrVT/uI2LofnYu YW1Oecv1O//SN4AAAA= X-Change-ID: 20251105-aheev-uninitialized-free-attr-overlayfs-6873964429e0 To: Miklos Szeredi , Amir Goldstein , Christian Brauner Cc: linux-unionfs@vger.kernel.org, linux-kernel@vger.kernel.org, Dan Carpenter , Ally Heev X-Mailer: b4 0.14.2 X-Developer-Signature: v=1; a=openpgp-sha256; l=1625; i=allyheev@gmail.com; h=from:subject:message-id; bh=2g+Ig9rajCSJQdPS5HN+sWyz1uVJcolY62QNF/qsOF8=; b=owGbwMvMwCU2zXbRFfvr1TKMp9WSGDIlmnlW5N+xmXHh+X1rZpXV3gvr3j4qF7h3++fHJ2rMX /bmTpt3qKOUhUGMi0FWTJGFUVTKT2+T1IS4w0nfYOawMoEMYeDiFICJ/I5g+MP76c3TPYszdG9E Vb3v/VesmcP6xWjVlriPc+YHp1+KereOkWFfuM22H9MiD3g5/353cbY88471n07n5Jzzr8j4ZS0 WM4MDAA== X-Developer-Key: i=allyheev@gmail.com; a=openpgp; fpr=01151A4E2EB21A905EC362F6963DA2D43FD77B1C Uninitialized pointers with `__free` attribute can cause undefined behavior as the memory assigned randomly to the pointer is freed automatically when the pointer goes out of scope. overlayfs doesn't have any bugs related to this as of now, but it is better to initialize and assign pointers with `__free` attribute in one statement to ensure proper scope-based cleanup Reported-by: Dan Carpenter Closes: https://lore.kernel.org/all/aPiG_F5EBQUjZqsl@stanley.mountain/ Acked-by: Amir Goldstein Signed-off-by: Ally Heev --- Changes in v2: - moved the variable initialization to the top - Link to v1: https://lore.kernel.org/r/20251105-aheev-uninitialized-free-a= ttr-overlayfs-v1-1-6ae4624655db@gmail.com --- fs/overlayfs/params.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/overlayfs/params.c b/fs/overlayfs/params.c index 63b7346c5ee1c127a9c33b12c3704aa035ff88cf..37086f73ac3ecfcd1c09ae6eccb= b69723006e031 100644 --- a/fs/overlayfs/params.c +++ b/fs/overlayfs/params.c @@ -448,7 +448,7 @@ static int ovl_parse_layer(struct fs_context *fc, struc= t fs_parameter *param, err =3D ovl_do_parse_layer(fc, param->string, &layer_path, layer); break; case fs_value_is_file: { - char *buf __free(kfree); + char *buf __free(kfree) =3D NULL; char *layer_name; =20 buf =3D kmalloc(PATH_MAX, GFP_KERNEL_ACCOUNT); --- base-commit: c9cfc122f03711a5124b4aafab3211cf4d35a2ac change-id: 20251105-aheev-uninitialized-free-attr-overlayfs-6873964429e0 Best regards, --=20 Ally Heev