From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id A2EC6459FD; Fri, 27 Sep 2024 20:27:32 +0200 (CEST) Received: from mails.dpdk.org (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 3CF9A4028C; Fri, 27 Sep 2024 20:27:32 +0200 (CEST) Received: from inbox.dpdk.org (inbox.dpdk.org [95.142.172.178]) by mails.dpdk.org (Postfix) with ESMTP id 217804025D for ; Fri, 27 Sep 2024 20:27:30 +0200 (CEST) Received: by inbox.dpdk.org (Postfix, from userid 33) id 0989145A46; Fri, 27 Sep 2024 20:27:30 +0200 (CEST) From: bugzilla@dpdk.org To: dev@dpdk.org Subject: [DPDK/ethdev Bug 1554] Use after free in cnxk_ethdev Date: Fri, 27 Sep 2024 18:27:29 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: DPDK X-Bugzilla-Component: ethdev X-Bugzilla-Version: 24.11 X-Bugzilla-Keywords: X-Bugzilla-Severity: major X-Bugzilla-Who: stephen@networkplumber.org X-Bugzilla-Status: UNCONFIRMED X-Bugzilla-Resolution: X-Bugzilla-Priority: Normal X-Bugzilla-Assigned-To: dev@dpdk.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter target_milestone Message-ID: Content-Type: multipart/alternative; boundary=17274616490.6AF33.4138332 Content-Transfer-Encoding: 7bit X-Bugzilla-URL: http://bugs.dpdk.org/ Auto-Submitted: auto-generated X-Auto-Response-Suppress: All MIME-Version: 1.0 X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org --17274616490.6AF33.4138332 Date: Fri, 27 Sep 2024 20:27:29 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://bugs.dpdk.org/ Auto-Submitted: auto-generated X-Auto-Response-Suppress: All https://bugs.dpdk.org/show_bug.cgi?id=3D1554 Bug ID: 1554 Summary: Use after free in cnxk_ethdev Product: DPDK Version: 24.11 Hardware: All OS: All Status: UNCONFIRMED Severity: major Priority: Normal Component: ethdev Assignee: dev@dpdk.org Reporter: stephen@networkplumber.org Target Milestone: --- If GCC malloc function tracing attributes are added, the the following erro= r is detected at compile time: ../drivers/net/cnxk/cnxk_ethdev_sec.c: In function =E2=80=98cnxk_nix_inl_custom_meta_pool_cb=E2=80=99: ../drivers/common/cnxk/roc_platform.h:196:32: warning: pointer =E2=80=98hp= =E2=80=99 used after =E2=80=98rte_mempool_free=E2=80=99 [-Wuse-after-free] 196 | #define plt_free rte_free ../drivers/net/cnxk/cnxk_ethdev_sec.c:140:17: note: in expansion of macro =E2=80=98plt_free=E2=80=99 140 | plt_free(hp->pool_config); | ^~~~~~~~ ../drivers/net/cnxk/cnxk_ethdev_sec.c:139:17: note: call to =E2=80=98rte_me= mpool_free=E2=80=99 here 139 | rte_mempool_free(hp); | ^~~~~~~~~~~~~~~~~~~~ --=20 You are receiving this mail because: You are the assignee for the bug.= --17274616490.6AF33.4138332 Date: Fri, 27 Sep 2024 20:27:29 +0200 MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://bugs.dpdk.org/ Auto-Submitted: auto-generated X-Auto-Response-Suppress: All

Bug ID	1554
Summary	Use after free in cnxk_ethdev
Product	DPDK
Version	24.11
Hardware	All
OS	All
Status	UNCONFIRMED
Severity	major
Priority	Normal
Component	ethdev
Assignee	dev@dpdk.org
Reporter	stephen@networkplumber.org
Target Milestone	---

If GCC malloc function tracing att=
ributes are added, the the following error is
detected at compile time:

../drivers/net/cnxk/cnxk_ethdev_sec.c: In function
=E2=80=98cnxk_nix_inl_custom_meta_pool_cb=E2=80=99:
../drivers/common/cnxk/roc_platform.h:196:32: warning: pointer =E2=80=98hp=
=E2=80=99 used after
=E2=80=98rte_mempool_free=E2=80=99 [-Wuse-after-free]
  196 | #define plt_free               rte_free
../drivers/net/cnxk/cnxk_ethdev_sec.c:140:17: note: in expansion of macro
=E2=80=98plt_free=E2=80=99
  140 |                 plt_free(hp->pool_config);
      |                 ^~~~~~~~
../drivers/net/cnxk/cnxk_ethdev_sec.c:139:17: note: call to =E2=80=98rte_me=
mpool_free=E2=80=99
here
  139 |                 rte_mempool_free(hp);
      |                 ^~~~~~~~~~~~~~~~~~~~

You are receiving this mail because:

You are the assignee for the bug.

=20=20=20=20=20=20=20=20=20=20

= --17274616490.6AF33.4138332--