diff options
| author | Johannes Weiner <[email protected]> | 2024-01-29 20:36:40 -0500 |
|---|---|---|
| committer | Andrew Morton <[email protected]> | 2024-02-22 10:24:42 -0800 |
| commit | e477559ca602a033e3970ebdbbfb39773345d694 (patch) | |
| tree | 87b0e3253878c9841ed1ac427822be21240875e9 | |
| parent | 7dd1f7f0fc1c98525cbadf954eb6b7672ad4acea (diff) | |
mm: zswap: warn when referencing a dead entry
Put a standard sanity check on zswap_entry_get() for UAF scenario.
Link: https://lkml.kernel.org/r/[email protected]
Signed-off-by: Johannes Weiner <[email protected]>
Reviewed-by: Nhat Pham <[email protected]>
Acked-by: Yosry Ahmed <[email protected]>
Reviewed-by: Chengming Zhou <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
| -rw-r--r-- | mm/zswap.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/mm/zswap.c b/mm/zswap.c index 0dfd410d1b3c..70e409add32b 100644 --- a/mm/zswap.c +++ b/mm/zswap.c @@ -541,6 +541,7 @@ static void zswap_entry_free(struct zswap_entry *entry) /* caller must hold the tree lock */ static void zswap_entry_get(struct zswap_entry *entry) { + WARN_ON_ONCE(!entry->refcount); entry->refcount++; } |