Re: [PATCH] slub: untag object before slab end

From: Pekka Enberg
Date: Wed Feb 13 2019 - 02:32:43 EST



On 13/02/2019 4.05, Qian Cai wrote:
get_freepointer() could return NULL if there is no more free objects in
the slab. However, it could return a tagged pointer (like
0x2200000000000000) with KASAN_SW_TAGS which would escape the NULL
object checking in check_valid_pointer() and trigger errors below, so
untag the object before checking for a NULL object there.

Reviewed-by: Pekka Enberg <penberg@xxxxxxxxxx>