diff options
| author | Helen Koike <koike@igalia.com> | 2026-07-13 17:49:35 -0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-07-21 15:12:23 -0700 |
| commit | 22f8aa35964e8f2ab026578f45befc9605fd1b28 (patch) | |
| tree | 85693c96d63fcc085a08f8c741b6b86de26ac84b /tools/perf/scripts/python | |
| parent | 6347c5314cee49f364aaf2e40ff15415a57a116e (diff) | |
tipc: fix infinite loop in __tipc_nl_compat_dumpit
cmd->dumpit callback can return a negative errno, causing an infinite
loop due to the while(len) condition. As the loop never terminates,
genl_mutex is never released, and other tasks waiting on it starve in D
state.
Check dumpit's return value, propagate it and jump to err_out on error.
Reported-by: syzbot+85d0bec020d805014a3a@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=85d0bec020d805014a3a
Fixes: d0796d1ef63d ("tipc: convert legacy nl bearer dump to nl compat")
Signed-off-by: Helen Koike <koike@igalia.com>
Reviewed-by: Tung Nguyen <tung.quang.nguyen@est.tech
Reviewed-by: Tung Nguyen <tung.quang.nguyen@est.tech>
Link: https://patch.msgid.link/20260713204940.647668-1-koike@igalia.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions
