]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
bpf: Fix memory leak in __lookup_instance error path
authorShardul Bankar <shardulsb08@gmail.com>
Thu, 16 Oct 2025 06:33:30 +0000 (12:03 +0530)
committerMartin KaFai Lau <martin.lau@kernel.org>
Thu, 16 Oct 2025 17:45:17 +0000 (10:45 -0700)
commitf6fddc6df3fc0cffce329b87927db4eb5989728d
tree700e60d62739d82d226c8b3d7065ae49a75420bb
parent0c1999ed33722f85476a248186d6e0eb2bf3dd2a
bpf: Fix memory leak in __lookup_instance error path

When __lookup_instance() allocates a func_instance structure but fails
to allocate the must_write_set array, it returns an error without freeing
the previously allocated func_instance. This causes a memory leak of 192
bytes (sizeof(struct func_instance)) each time this error path is triggered.

Fix by freeing 'result' on must_write_set allocation failure.

Fixes: b3698c356ad9 ("bpf: callchain sensitive stack liveness tracking using CFG")
Reported-by: BPF Runtime Fuzzer (BRF)
Signed-off-by: Shardul Bankar <shardulsb08@gmail.com>
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://patch.msgid.link/20251016063330.4107547-1-shardulsb08@gmail.com
kernel/bpf/liveness.c