Re: KASAN: use-after-free Read in rxrpc_release_call

From: David Howells
Date: Fri Oct 04 2019 - 10:40:09 EST


Hillf Danton <hdanton@xxxxxxxx> wrote:

> if (conn) {
> - rxrpc_disconnect_call(call);
> conn->security->free_call_crypto(call);
> + rxrpc_disconnect_call(call);
> }

Better to cache the security pointer in the call struct, I think.

David