Shardul Bankar f6fddc6df3 bpf: Fix memory leak in __lookup_instance error path ...

When __lookup_instance() allocates a func_instance structure but fails
to allocate the must_write_set array, it returns an error without freeing
the previously allocated func_instance. This causes a memory leak of 192
bytes (sizeof(struct func_instance)) each time this error path is triggered.

Fix by freeing 'result' on must_write_set allocation failure.

Fixes: b3698c356a ("bpf: callchain sensitive stack liveness tracking using CFG")
Reported-by: BPF Runtime Fuzzer (BRF)
Signed-off-by: Shardul Bankar <[email protected]>
Signed-off-by: Martin KaFai Lau <[email protected]>
Acked-by: Eduard Zingerman <[email protected]>
Link: https://patch.msgid.link/[email protected]

2025-10-16 10:45:17 -07:00

..

preload

umd: Remove usermode driver framework

2025-07-26 21:03:04 +02:00

arena.c

bpf: Report arena faults to BPF stderr

2025-09-11 13:00:43 -07:00

arraymap.c

bpf: bpf task work plumbing

2025-09-23 07:34:38 -07:00

bloom_filter.c

…

bpf_cgrp_storage.c

bpf: use rcu_read_lock_dont_migrate() for bpf_cgrp_storage_free()

2025-08-25 18:52:16 -07:00

bpf_inode_storage.c

bpf: use rcu_read_lock_dont_migrate() for bpf_inode_storage_free()

2025-08-25 18:52:16 -07:00

bpf_iter.c

bpf: use rcu_read_lock_dont_migrate() for bpf_iter_run_prog()

2025-08-25 18:52:16 -07:00

bpf_local_storage.c

bpf: add btf_type_is_i{32,64} helpers

2025-06-25 15:15:49 -07:00

bpf_lru_list.c

bpf: Replace get_next_cpu() with cpumask_next_wrap()

2025-08-18 15:11:02 +02:00

bpf_lru_list.h

bpf: Adjust free target to avoid global starvation of LRU map

2025-06-18 18:50:14 -07:00

bpf_lsm.c

…

bpf_struct_ops.c

bpf: Allow struct_ops to get map id by kdata

2025-08-06 13:39:58 -07:00

bpf_task_storage.c

bpf: use rcu_read_lock_dont_migrate() for bpf_task_storage_free()

2025-08-25 18:52:16 -07:00

btf_iter.c

…

btf_relocate.c

…

btf.c

bpf: Allow union argument in trampoline based programs

2025-09-23 12:07:46 -07:00

cgroup_iter.c

…

cgroup.c

bpf: WQ_PERCPU added to alloc_workqueue users

2025-09-08 10:04:37 -07:00

core.c

bpf: Enforce expected_attach_type for tailcall compatibility

2025-09-27 06:24:27 -07:00

cpumap.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf after rc5

2025-09-11 09:34:37 -07:00

cpumask.c

…

crypto.c

bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt

2025-09-09 15:07:57 -07:00

devmap.c

bpf: Remove redundant __GFP_NOWARN

2025-08-12 14:56:04 -07:00

disasm.c

bpftool: Using the right format specifiers

2025-03-17 13:50:56 -07:00

disasm.h

…

dispatcher.c

…

dmabuf_iter.c

bpf: Add open coded dmabuf iterator

2025-05-27 09:51:25 -07:00

hashtab.c

bpf: bpf task work plumbing

2025-09-23 07:34:38 -07:00

helpers.c

bpf: Replace bpf_map_kmalloc_node() with kmalloc_nolock() to allocate bpf_async_cb structures.

2025-10-15 12:22:22 +02:00

inode.c

bpf: Avoid RCU context warning when unpinning htab with internal structs

2025-10-10 10:10:08 -07:00

Kconfig

bpf: Update the bpf_prog_calc_tag to use SHA256

2025-09-18 19:10:20 -07:00

kmem_cache_iter.c

…

link_iter.c

bpf: Clean up individual BTF_ID code

2025-07-16 18:34:42 -07:00

liveness.c

bpf: Fix memory leak in __lookup_instance error path

2025-10-16 10:45:17 -07:00

local_storage.c

bpf: Remove redundant __GFP_NOWARN

2025-08-12 14:56:04 -07:00

log.c

bpf: disable and remove registers chain based liveness

2025-09-19 09:27:23 -07:00

lpm_trie.c

bpf: Convert lpm_trie.c to rqspinlock

2025-03-19 08:03:05 -07:00

Makefile

bpf: callchain sensitive stack liveness tracking using CFG

2025-09-19 09:27:23 -07:00

map_in_map.c

…

map_in_map.h

…

map_iter.c

…

memalloc.c

bpf: replace use of system_unbound_wq with system_dfl_wq

2025-09-08 10:04:37 -07:00

mmap_unlock_work.h

…

mprog.c

…

net_namespace.c

bpf: Remove attach_type in bpf_netns_link

2025-07-11 11:01:04 -07:00

offload.c

…

percpu_freelist.c

bpf: Convert percpu_freelist.c to rqspinlock

2025-03-19 08:03:05 -07:00

percpu_freelist.h

bpf: Convert percpu_freelist.c to rqspinlock

2025-03-19 08:03:05 -07:00

prog_iter.c

bpf: Clean up individual BTF_ID code

2025-07-16 18:34:42 -07:00

queue_stack_maps.c

bpf: Convert queue_stack map to rqspinlock

2025-04-10 12:51:10 -07:00

range_tree.c

…

range_tree.h

…

relo_core.c

…

reuseport_array.c

…

ringbuf.c

bpf: Convert ringbuf map to rqspinlock

2025-04-11 10:28:26 -07:00

rqspinlock.c

rqspinlock: Choose trylock fallback for NMI waiters

2025-09-09 15:10:28 -07:00

rqspinlock.h

rqspinlock: Protect waiters in queue from stalls

2025-03-19 08:03:05 -07:00

stackmap.c

Merge tag 'bpf-next-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2025-09-30 17:58:11 -07:00

stream.c

mm: Allow GFP_ACCOUNT to be used in alloc_pages_nolock().

2025-09-29 09:42:35 +02:00

syscall.c

bpf: Replace bpf_map_kmalloc_node() with kmalloc_nolock() to allocate bpf_async_cb structures.

2025-10-15 12:22:22 +02:00

sysfs_btf.c

Merge tag 'driver-core-6.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

2025-07-29 12:15:39 -07:00

task_iter.c

…

tcx.c

bpf: Remove location field in tcx_link

2025-07-11 11:00:57 -07:00

tnum.c

bpf: Improve the general precision of tnum_mul

2025-08-27 15:00:26 -07:00

token.c

bpf: Add struct bpf_token_info

2025-07-16 18:38:05 -07:00

trampoline.c

bpf: use rcu_read_lock_dont_migrate() for trampoline.c

2025-08-25 18:52:16 -07:00

verifier.c

bpf: Reject negative offsets for ALU ops

2025-10-01 15:43:13 -07:00