[DPDK/ethdev Bug 1554] Use after free in cnxk_ethdev

[DPDK/ethdev Bug 1554] Use after free in cnxk_ethdev

[bugzilla]

[-- Attachment #1: Type: text/plain, Size: 1268 bytes --]

https://bugs.dpdk.org/show_bug.cgi?id=1554

            Bug ID: 1554
           Summary: Use after free in cnxk_ethdev
           Product: DPDK
           Version: 24.11
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: major
          Priority: Normal
         Component: ethdev
          Assignee: dev@dpdk.org
          Reporter: stephen@networkplumber.org
  Target Milestone: ---

If GCC malloc function tracing attributes are added, the the following error is
detected at compile time:

../drivers/net/cnxk/cnxk_ethdev_sec.c: In function
‘cnxk_nix_inl_custom_meta_pool_cb’:
../drivers/common/cnxk/roc_platform.h:196:32: warning: pointer ‘hp’ used after
‘rte_mempool_free’ [-Wuse-after-free]
  196 | #define plt_free               rte_free
../drivers/net/cnxk/cnxk_ethdev_sec.c:140:17: note: in expansion of macro
‘plt_free’
  140 |                 plt_free(hp->pool_config);
      |                 ^~~~~~~~
../drivers/net/cnxk/cnxk_ethdev_sec.c:139:17: note: call to ‘rte_mempool_free’
here
  139 |                 rte_mempool_free(hp);
      |                 ^~~~~~~~~~~~~~~~~~~~

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #2: Type: text/html, Size: 3128 bytes --]

[DPDK/ethdev Bug 1554] Use after free in cnxk_ethdev

[bugzilla]

[-- Attachment #1: Type: text/plain, Size: 548 bytes --]

https://bugs.dpdk.org/show_bug.cgi?id=1554

Thomas Monjalon (thomas@monjalon.net) changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #1 from Thomas Monjalon (thomas@monjalon.net) ---
Resolved in http://git.dpdk.org/dpdk/commit/?id=c024de1793

-- 
You are receiving this mail because:
You are the assignee for the bug.

[-- Attachment #2: Type: text/html, Size: 2556 bytes --]