Dmitry Vyukov 47adccce3e kasan: detect invalid frees for large objects ... Patch series "kasan: detect invalid frees". KASAN detects double-frees, but does not detect invalid-frees (when a pointer into a middle of heap object is passed to free). We recently had a very unpleasant case in crypto code which freed an inner object inside of a heap allocation. This left unnoticed during free, but totally corrupted heap and later lead to a bunch of random crashes all over kernel code. Detect invalid frees. This patch (of 5): Detect frees of pointers into middle of large heap objects. I dropped const from kasan_kfree_large() because it starts propagating through a bunch of functions in kasan_report.c, slab/slub nearest_obj(), all of their local variables, fixup_red_left(), etc. Link: http://lkml.kernel.org/r/1b45b4fe1d20fc0de1329aab674c1dd973fee723.1514378558.git.dvyukov@google.com Signed-off-by: Dmitry Vyukov <dvyukov@google.com> Cc: Andrey Ryabinin <aryabinin@virtuozzo.com>a Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2018-02-06 18:32:42 -08:00
..
kasan_init.c	mm/kasan/kasan_init.c: use kasan_zero_pud for p4d table	2017-07-10 16:32:33 -07:00
kasan.c	kasan: detect invalid frees for large objects	2018-02-06 18:32:42 -08:00
kasan.h	kasan: detect invalid frees for large objects	2018-02-06 18:32:42 -08:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
quarantine.c	kasan: fix races in quarantine_remove_cache()	2017-03-09 17:01:10 -08:00
report.c	kasan: detect invalid frees for large objects	2018-02-06 18:32:42 -08:00