Re: KASAN: use-after-free Read in rxrpc_release_call
From: David Howells
Date: Fri Oct 04 2019 - 10:40:09 EST
Hillf Danton <hdanton@xxxxxxxx> wrote:
> if (conn) {
> - rxrpc_disconnect_call(call);
> conn->security->free_call_crypto(call);
> + rxrpc_disconnect_call(call);
> }
Better to cache the security pointer in the call struct, I think.
David