- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6] smb: client: fix wrong index reference in smb2_compound_op()
by Yifan Qiao 05 Nov '25

05 Nov '25

From: Sang-Heon Jeon <ekffu200098(a)gmail.com> stable inclusion from stable-v6.6.109 commit ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID228Z CVE: CVE-2025-39975 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit fbe2dc6a9c7318f7263f5e4d50f6272b931c5756 ] In smb2_compound_op(), the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling of command results. Also, if incorrectly computed index is greather than or equal to MAX_COMPOUND, it can cause out-of-bounds accesses. Fixes: 3681c74d342d ("smb: client: handle lack of EA support in smb2_query_path_info()") # 6.14 Reviewed-by: Paulo Alcantara (Red Hat) <pc(a)manguebit.org> Signed-off-by: Sang-Heon Jeon <ekffu200098(a)gmail.com> Signed-off-by: Steve French <stfrench(a)microsoft.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/smb/client/smb2inode.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/smb/client/smb2inode.c b/fs/smb/client/smb2inode.c index 0cc80f472432..79641d1ee867 100644 --- a/fs/smb/client/smb2inode.c +++ b/fs/smb/client/smb2inode.c @@ -641,7 +641,7 @@ static int smb2_compound_op(const unsigned int xid, struct cifs_tcon *tcon, tmp_rc = rc; for (i = 0; i < num_cmds; i++) { - char *buf = rsp_iov[i + i].iov_base; + char *buf = rsp_iov[i + 1].iov_base; if (buf && resp_buftype[i + 1] != CIFS_NO_BUFFER) rc = server->ops->map_error(buf, false); -- 2.39.2

2 1

[openeuler:OLK-6.6 3098/3098] kernel/bpf-rvi/common_kfuncs.c:127:26: warning: no previous prototype for 'bpf_nr_running'
by kernel test robot 05 Nov '25

05 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: faa195bad3afed3c326917fb4cd36e0bd311220c commit: 34f90dce941b028e02a0336711907b220e3c5765 [3098/3098] bpf-rvi: Add cpu runqueue related kfuncs config: x86_64-randconfig-001-20251104 (https://download.01.org/0day-ci/archive/20251105/202511050754.SzG0bccj-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251105/202511050754.SzG0bccj-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511050754.SzG0bccj-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/bpf-rvi/common_kfuncs.c:25:32: warning: no previous prototype for 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 25 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^~~~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:34:35: warning: no previous prototype for 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 34 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:39:17: warning: no previous prototype for 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 39 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:53:17: warning: no previous prototype for 'bpf_pidns_last_pid' [-Wmissing-prototypes] 53 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:82:18: warning: no previous prototype for 'bpf_si_memswinfo' [-Wmissing-prototypes] 82 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:92:27: warning: no previous prototype for 'bpf_page_counter_read' [-Wmissing-prototypes] 92 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:102:18: warning: no previous prototype for 'bpf_seq_file_append' [-Wmissing-prototypes] 102 | __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) | ^~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:116:18: warning: no previous prototype for 'bpf_get_boottime_timens' [-Wmissing-prototypes] 116 | __bpf_kfunc void bpf_get_boottime_timens(struct task_struct *tsk, struct timespec64 *boottime) | ^~~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:122:27: warning: no previous prototype for 'bpf_get_total_forks' [-Wmissing-prototypes] 122 | __bpf_kfunc unsigned long bpf_get_total_forks(void) | ^~~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:127:26: warning: no previous prototype for 'bpf_nr_running' [-Wmissing-prototypes] 127 | __bpf_kfunc unsigned int bpf_nr_running(void) | ^~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:132:32: warning: no previous prototype for 'bpf_nr_context_switches' [-Wmissing-prototypes] 132 | __bpf_kfunc unsigned long long bpf_nr_context_switches(void) | ^~~~~~~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:137:26: warning: no previous prototype for 'bpf_nr_iowait' [-Wmissing-prototypes] 137 | __bpf_kfunc unsigned int bpf_nr_iowait(void) | ^~~~~~~~~~~~~ vim +/bpf_nr_running +127 kernel/bpf-rvi/common_kfuncs.c 96 97 /* 98 * Stat related kfuncs 99 */ 100 101 /* Moving src's content to the end of dst. Reference: seq_vprintf. */ > 102 __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) 103 { 104 /* 105 * ->count: length of content 106 * ->size: available buffer space 107 * i.e. seq_printf(dst, "%s", src->buf) 108 */ 109 if (dst->count < dst->size) 110 if (src->count < dst->size - dst->count) { 111 memmove(dst->buf + dst->count, src->buf, src->count); 112 dst->count += src->count; 113 } 114 } 115 > 116 __bpf_kfunc void bpf_get_boottime_timens(struct task_struct *tsk, struct timespec64 *boottime) 117 { 118 getboottime64(boottime); 119 *boottime = timespec64_sub(*boottime, tsk->nsproxy->time_ns->offsets.boottime); 120 } 121 > 122 __bpf_kfunc unsigned long bpf_get_total_forks(void) 123 { 124 return total_forks; 125 } 126 > 127 __bpf_kfunc unsigned int bpf_nr_running(void) 128 { 129 return nr_running(); 130 } 131 > 132 __bpf_kfunc unsigned long long bpf_nr_context_switches(void) 133 { 134 return nr_context_switches(); 135 } 136 > 137 __bpf_kfunc unsigned int bpf_nr_iowait(void) 138 { 139 return nr_iowait(); 140 } 141 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3098/3098] fs/proc/stat.c:234:18: warning: no previous prototype for 'bpf_show_all_irqs'
by kernel test robot 05 Nov '25

05 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: faa195bad3afed3c326917fb4cd36e0bd311220c commit: 19895b9974c36318281e4e18131a2cfb43543ffd [3098/3098] bpf-rvi: Add stat-related misc kfuncs config: x86_64-randconfig-001-20251104 (https://download.01.org/0day-ci/archive/20251105/202511050607.O3tCEeVJ-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251105/202511050607.O3tCEeVJ-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511050607.O3tCEeVJ-lkp@intel.com/ All warnings (new ones prefixed by >>): fs/proc/stat.c:224:17: warning: no previous prototype for 'bpf_get_idle_time' [-Wmissing-prototypes] 224 | __bpf_kfunc u64 bpf_get_idle_time(struct kernel_cpustat *kcs, int cpu) | ^~~~~~~~~~~~~~~~~ fs/proc/stat.c:229:17: warning: no previous prototype for 'bpf_get_iowait_time' [-Wmissing-prototypes] 229 | __bpf_kfunc u64 bpf_get_iowait_time(struct kernel_cpustat *kcs, int cpu) | ^~~~~~~~~~~~~~~~~~~ >> fs/proc/stat.c:234:18: warning: no previous prototype for 'bpf_show_all_irqs' [-Wmissing-prototypes] 234 | __bpf_kfunc void bpf_show_all_irqs(struct seq_file *p) | ^~~~~~~~~~~~~~~~~ -- kernel/bpf-rvi/common_kfuncs.c:24:32: warning: no previous prototype for 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 24 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^~~~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:33:35: warning: no previous prototype for 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 33 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:38:17: warning: no previous prototype for 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 38 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:52:17: warning: no previous prototype for 'bpf_pidns_last_pid' [-Wmissing-prototypes] 52 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:81:18: warning: no previous prototype for 'bpf_si_memswinfo' [-Wmissing-prototypes] 81 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:91:27: warning: no previous prototype for 'bpf_page_counter_read' [-Wmissing-prototypes] 91 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:101:18: warning: no previous prototype for 'bpf_seq_file_append' [-Wmissing-prototypes] 101 | __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) | ^~~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:115:18: warning: no previous prototype for 'bpf_get_boottime_timens' [-Wmissing-prototypes] 115 | __bpf_kfunc void bpf_get_boottime_timens(struct task_struct *tsk, struct timespec64 *boottime) | ^~~~~~~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:121:27: warning: no previous prototype for 'bpf_get_total_forks' [-Wmissing-prototypes] 121 | __bpf_kfunc unsigned long bpf_get_total_forks(void) | ^~~~~~~~~~~~~~~~~~~ vim +/bpf_show_all_irqs +234 fs/proc/stat.c 222 223 #ifdef CONFIG_BPF_RVI > 224 __bpf_kfunc u64 bpf_get_idle_time(struct kernel_cpustat *kcs, int cpu) 225 { 226 return get_idle_time(kcs, cpu); 227 } 228 229 __bpf_kfunc u64 bpf_get_iowait_time(struct kernel_cpustat *kcs, int cpu) 230 { 231 return get_iowait_time(kcs, cpu); 232 } 233 > 234 __bpf_kfunc void bpf_show_all_irqs(struct seq_file *p) 235 { 236 show_all_irqs(p); 237 } 238 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3098/3098] kernel/bpf-rvi/common_kfuncs.c:97:18: warning: no previous prototype for 'bpf_seq_file_append'
by kernel test robot 05 Nov '25

05 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: faa195bad3afed3c326917fb4cd36e0bd311220c commit: 1afa15e45da121993a15941b08fef5e3d58f40e5 [3098/3098] bpf-rvi: Add bpf_seq_file_append() kfunc config: x86_64-randconfig-001-20251104 (https://download.01.org/0day-ci/archive/20251105/202511050410.2c1BvP2L-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251105/202511050410.2c1BvP2L-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511050410.2c1BvP2L-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/bpf-rvi/common_kfuncs.c:20:32: warning: no previous prototype for 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 20 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^~~~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:29:35: warning: no previous prototype for 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 29 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:34:17: warning: no previous prototype for 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 34 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:48:17: warning: no previous prototype for 'bpf_pidns_last_pid' [-Wmissing-prototypes] 48 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:77:18: warning: no previous prototype for 'bpf_si_memswinfo' [-Wmissing-prototypes] 77 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:87:27: warning: no previous prototype for 'bpf_page_counter_read' [-Wmissing-prototypes] 87 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^~~~~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:97:18: warning: no previous prototype for 'bpf_seq_file_append' [-Wmissing-prototypes] 97 | __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) | ^~~~~~~~~~~~~~~~~~~ vim +/bpf_seq_file_append +97 kernel/bpf-rvi/common_kfuncs.c 91 92 /* 93 * Stat related kfuncs 94 */ 95 96 /* Moving src's content to the end of dst. Reference: seq_vprintf. */ > 97 __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) 98 { 99 /* 100 * ->count: length of content 101 * ->size: available buffer space 102 * i.e. seq_printf(dst, "%s", src->buf) 103 */ 104 if (dst->count < dst->size) 105 if (src->count < dst->size - dst->count) { 106 memmove(dst->buf + dst->count, src->buf, src->count); 107 dst->count += src->count; 108 } 109 } 110 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3098/3098] kernel/bpf-rvi/common_kfuncs.c:86:27: warning: no previous prototype for 'bpf_page_counter_read'
by kernel test robot 05 Nov '25

05 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: faa195bad3afed3c326917fb4cd36e0bd311220c commit: 5e4cec4acb12a17b26d4d2ae4c29eb29b017f854 [3098/3098] bpf-rvi: Add bpf_page_counter_read() kfunc config: x86_64-randconfig-001-20251104 (https://download.01.org/0day-ci/archive/20251105/202511050235.5PdxK5fh-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251105/202511050235.5PdxK5fh-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511050235.5PdxK5fh-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/bpf-rvi/common_kfuncs.c:19:32: warning: no previous prototype for 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 19 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^~~~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:28:35: warning: no previous prototype for 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 28 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:33:17: warning: no previous prototype for 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 33 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:47:17: warning: no previous prototype for 'bpf_pidns_last_pid' [-Wmissing-prototypes] 47 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:76:18: warning: no previous prototype for 'bpf_si_memswinfo' [-Wmissing-prototypes] 76 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:86:27: warning: no previous prototype for 'bpf_page_counter_read' [-Wmissing-prototypes] 86 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^~~~~~~~~~~~~~~~~~~~~ vim +/bpf_page_counter_read +86 kernel/bpf-rvi/common_kfuncs.c 32 > 33 __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) 34 { 35 struct pid_iter iter = {}; 36 u32 nr_running = 0, nr_threads = 0; 37 38 for_each_task_in_pidns(iter, ns) { 39 nr_threads++; 40 if (task_is_running(iter.task)) 41 nr_running++; 42 } 43 44 return (u64)nr_running << 32 | nr_threads; 45 } 46 47 __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) 48 { 49 return idr_get_cursor(&ns->idr) - 1; 50 } 51 52 /* 53 * Swaps related kfuncs 54 */ 55 56 /* 57 * no padding member "_f" compared to struct sysinfo, because sizeof(_f) 58 * maybe zero and not supported by bpf_verifier. 59 */ 60 struct bpf_sysinfo { 61 __kernel_long_t uptime; /* Seconds since boot */ 62 __kernel_ulong_t loads[3]; /* 1, 5, and 15 minute load averages */ 63 __kernel_ulong_t totalram; /* Total usable main memory size */ 64 __kernel_ulong_t freeram; /* Available memory size */ 65 __kernel_ulong_t sharedram; /* Amount of shared memory */ 66 __kernel_ulong_t bufferram; /* Memory used by buffers */ 67 __kernel_ulong_t totalswap; /* Total swap space size */ 68 __kernel_ulong_t freeswap; /* swap space still available */ 69 __u16 procs; /* Number of current processes */ 70 __u16 pad; /* Explicit padding for m68k */ 71 __kernel_ulong_t totalhigh; /* Total high memory size */ 72 __kernel_ulong_t freehigh; /* Available high memory size */ 73 __u32 mem_unit; /* Memory unit size in bytes */ 74 }; 75 76 __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) 77 { 78 struct sysinfo *si = (struct sysinfo *)bsi; 79 80 if (si) { 81 si_meminfo(si); 82 si_swapinfo(si); 83 } 84 } 85 > 86 __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) 87 { 88 return page_counter_read(counter); 89 } 90 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3098/3098] kernel/bpf-rvi/common_kfuncs.c:75:18: warning: no previous prototype for 'bpf_si_memswinfo'
by kernel test robot 05 Nov '25

05 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: faa195bad3afed3c326917fb4cd36e0bd311220c commit: b3aa368c1f9f8f3acee4703cfebb30e7a909df9f [3098/3098] bpf-rvi: Add bpf_si_memswinfo() kfunc config: x86_64-randconfig-001-20251104 (https://download.01.org/0day-ci/archive/20251105/202511050050.0VfB10bw-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251105/202511050050.0VfB10bw-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511050050.0VfB10bw-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/bpf-rvi/common_kfuncs.c:18:32: warning: no previous prototype for 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 18 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^~~~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:27:35: warning: no previous prototype for 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 27 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^~~~~~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:32:17: warning: no previous prototype for 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 32 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ kernel/bpf-rvi/common_kfuncs.c:46:17: warning: no previous prototype for 'bpf_pidns_last_pid' [-Wmissing-prototypes] 46 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:75:18: warning: no previous prototype for 'bpf_si_memswinfo' [-Wmissing-prototypes] 75 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^~~~~~~~~~~~~~~~ vim +/bpf_si_memswinfo +75 kernel/bpf-rvi/common_kfuncs.c 22 23 /* 24 * Loadavg related kfuncs 25 */ 26 > 27 __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) 28 { 29 return task_active_pid_ns(task); 30 } 31 32 __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) 33 { 34 struct pid_iter iter = {}; 35 u32 nr_running = 0, nr_threads = 0; 36 37 for_each_task_in_pidns(iter, ns) { 38 nr_threads++; 39 if (task_is_running(iter.task)) 40 nr_running++; 41 } 42 43 return (u64)nr_running << 32 | nr_threads; 44 } 45 46 __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) 47 { 48 return idr_get_cursor(&ns->idr) - 1; 49 } 50 51 /* 52 * Swaps related kfuncs 53 */ 54 55 /* 56 * no padding member "_f" compared to struct sysinfo, because sizeof(_f) 57 * maybe zero and not supported by bpf_verifier. 58 */ 59 struct bpf_sysinfo { 60 __kernel_long_t uptime; /* Seconds since boot */ 61 __kernel_ulong_t loads[3]; /* 1, 5, and 15 minute load averages */ 62 __kernel_ulong_t totalram; /* Total usable main memory size */ 63 __kernel_ulong_t freeram; /* Available memory size */ 64 __kernel_ulong_t sharedram; /* Amount of shared memory */ 65 __kernel_ulong_t bufferram; /* Memory used by buffers */ 66 __kernel_ulong_t totalswap; /* Total swap space size */ 67 __kernel_ulong_t freeswap; /* swap space still available */ 68 __u16 procs; /* Number of current processes */ 69 __u16 pad; /* Explicit padding for m68k */ 70 __kernel_ulong_t totalhigh; /* Total high memory size */ 71 __kernel_ulong_t freehigh; /* Available high memory size */ 72 __u32 mem_unit; /* Memory unit size in bytes */ 73 }; 74 > 75 __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) 76 { 77 struct sysinfo *si = (struct sysinfo *)bsi; 78 79 if (si) { 80 si_meminfo(si); 81 si_swapinfo(si); 82 } 83 } 84 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3075/3075] drivers/ub/ubus/enum.c:1332:5: warning: no previous prototype for function 'ub_enum_entities_active'
by kernel test robot 04 Nov '25

04 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 25097b0e8b7a08363a1cba931a5762548a3b0e16 commit: e7af929fc0444491fa5f13a00c3f576ea5a4b923 [3075/3075] ub:ubus: Supports device enumeration. config: arm64-allmodconfig (https://download.01.org/0day-ci/archive/20251104/202511042359.TcIxX2CV-lkp@…) compiler: clang version 19.1.7 (https://github.com/llvm/llvm-project cd708029e0b2869e80abe31ddb175f7c35361f90) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251104/202511042359.TcIxX2CV-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511042359.TcIxX2CV-lkp@intel.com/ All warnings (new ones prefixed by >>): drivers/ub/ubus/enum.c:996:5: warning: no previous prototype for function 'ub_cfg_read_guid' [-Wmissing-prototypes] 996 | int ub_cfg_read_guid(struct ub_entity *uent) | ^ drivers/ub/ubus/enum.c:996:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 996 | int ub_cfg_read_guid(struct ub_entity *uent) | ^ | static drivers/ub/ubus/enum.c:1097:6: warning: no previous prototype for function 'ub_enum_clear_ent_list' [-Wmissing-prototypes] 1097 | void ub_enum_clear_ent_list(struct list_head *dev_list) | ^ drivers/ub/ubus/enum.c:1097:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1097 | void ub_enum_clear_ent_list(struct list_head *dev_list) | ^ | static >> drivers/ub/ubus/enum.c:1332:5: warning: no previous prototype for function 'ub_enum_entities_active' [-Wmissing-prototypes] 1332 | int ub_enum_entities_active(struct list_head *dev_list) | ^ drivers/ub/ubus/enum.c:1332:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1332 | int ub_enum_entities_active(struct list_head *dev_list) | ^ | static 3 warnings generated. vim +/ub_enum_entities_active +1332 drivers/ub/ubus/enum.c 1331 > 1332 int ub_enum_entities_active(struct list_head *dev_list) 1333 { 1334 struct ub_entity *uent, *tmp; 1335 int ret; 1336 1337 list_for_each_entry_safe(uent, tmp, dev_list, node) { 1338 if (uent->entity_idx != 0) 1339 continue; 1340 1341 ub_route_sync_dev(uent); 1342 ret = ub_setup_ent(uent); 1343 if (ret) { 1344 pr_err("setup dev err, ret=%d\n", ret); 1345 return ret; 1346 } 1347 1348 list_del(&uent->node); 1349 ub_entity_add(uent, uent->ubc); 1350 ub_start_ent(uent); 1351 } 1352 1353 return 0; 1354 } 1355 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3098/3098] kernel/sched/cpuacct.c:417:17: warning: no previous prototype for 'bpf_task_ca_cpuusage'
by kernel test robot 04 Nov '25

04 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 25097b0e8b7a08363a1cba931a5762548a3b0e16 commit: 00c32c5569d488b6c90f1695175577e35c17c21c [3098/3098] bpf-rvi: cpuacct: Add bpf_task_ca_cpuusage() kfunc config: x86_64-randconfig-001-20251104 (https://download.01.org/0day-ci/archive/20251104/202511042208.SaUQnITn-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251104/202511042208.SaUQnITn-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511042208.SaUQnITn-lkp@intel.com/ All warnings (new ones prefixed by >>): In file included from kernel/sched/build_utility.c:61: >> kernel/sched/cpuacct.c:417:17: warning: no previous prototype for 'bpf_task_ca_cpuusage' [-Wmissing-prototypes] 417 | __bpf_kfunc u64 bpf_task_ca_cpuusage(struct task_struct *p) | ^~~~~~~~~~~~~~~~~~~~ kernel/sched/cpuacct.c:424:18: warning: no previous prototype for 'bpf_cpuacct_kcpustat_cpu_fetch' [-Wmissing-prototypes] 424 | __bpf_kfunc void bpf_cpuacct_kcpustat_cpu_fetch(struct kernel_cpustat *dst, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from kernel/sched/build_utility.c:73: kernel/sched/debug.c:102:12: warning: no previous prototype for 'is_prefer_numa' [-Wmissing-prototypes] 102 | int __weak is_prefer_numa(void) | ^~~~~~~~~~~~~~ vim +/bpf_task_ca_cpuusage +417 kernel/sched/cpuacct.c 416 > 417 __bpf_kfunc u64 bpf_task_ca_cpuusage(struct task_struct *p) 418 { 419 if (!p) 420 return 0; 421 return cpuusage_read(task_css(p, cpuacct_cgrp_id), NULL); 422 } 423 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] fs/smb: Fix inconsistent refcnt update
by Yifan Qiao 04 Nov '25

04 Nov '25

From: Shuhao Fu <sfual(a)cse.ust.hk> mainline inclusion from mainline-v6.17-rc4 commit ab529e6ca1f67bcf31f3ea80c72bffde2e9e053e category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ICYBJ5 CVE: CVE-2025-39819 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug: 1. In the comment section of the function, it clearly states that the reference to `cfile` should be dropped after calling this function. 2. Every control flow path would check and drop the reference to `cfile`, except the patched one. 3. Existing callers would not handle refcount update of `cfile` if -ENOMEM is returned. To fix the bug, an extra goto label "out" is added, to make sure that the cleanup logic would always be respected. As the problem is caused by the allocation failure of `vars`, the cleanup logic between label "finished" and "out" can be safely ignored. According to the definition of function `is_replayable_error`, the error code of "-ENOMEM" is not recoverable. Therefore, the replay logic also gets ignored. Signed-off-by: Shuhao Fu <sfual(a)cse.ust.hk> Acked-by: Paulo Alcantara (Red Hat) <pc(a)manguebit.org> Cc: stable(a)vger.kernel.org Signed-off-by: Steve French <stfrench(a)microsoft.com> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/smb/client/smb2inode.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/fs/smb/client/smb2inode.c b/fs/smb/client/smb2inode.c index e1078a1decdf..0cc80f472432 100644 --- a/fs/smb/client/smb2inode.c +++ b/fs/smb/client/smb2inode.c @@ -206,8 +206,10 @@ static int smb2_compound_op(const unsigned int xid, struct cifs_tcon *tcon, server = cifs_pick_channel(ses); vars = kzalloc(sizeof(*vars), GFP_ATOMIC); - if (vars == NULL) - return -ENOMEM; + if (vars == NULL) { + rc = -ENOMEM; + goto out; + } rqst = &vars->rqst[0]; rsp_iov = &vars->rsp_iov[0]; @@ -828,6 +830,7 @@ static int smb2_compound_op(const unsigned int xid, struct cifs_tcon *tcon, smb2_should_replay(tcon, &retries, &cur_sleep)) goto replay_again; +out: if (cfile) cifsFileInfo_put(cfile); -- 2.39.2

2 1

[openeuler:OLK-6.6 3098/3098] kernel/bpf-rvi/common_kfuncs.c:24:35: warning: no previous prototype for 'bpf_task_active_pid_ns'
by kernel test robot 04 Nov '25

04 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 25097b0e8b7a08363a1cba931a5762548a3b0e16 commit: ef015dbb4151c10d0415045f9d0fcf3dc85063d7 [3098/3098] bpf-rvi: pidns: Add for_each_task_in_pidns and loadavg-related kfuncs config: x86_64-randconfig-001-20251104 (https://download.01.org/0day-ci/archive/20251104/202511042031.XJbcBnUd-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251104/202511042031.XJbcBnUd-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511042031.XJbcBnUd-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/bpf-rvi/common_kfuncs.c:15:32: warning: no previous prototype for 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 15 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^~~~~~~~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:24:35: warning: no previous prototype for 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 24 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^~~~~~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:29:17: warning: no previous prototype for 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 29 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ >> kernel/bpf-rvi/common_kfuncs.c:43:17: warning: no previous prototype for 'bpf_pidns_last_pid' [-Wmissing-prototypes] 43 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^~~~~~~~~~~~~~~~~~ vim +/bpf_task_active_pid_ns +24 kernel/bpf-rvi/common_kfuncs.c 19 20 /* 21 * Loadavg related kfuncs 22 */ 23 > 24 __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) 25 { 26 return task_active_pid_ns(task); 27 } 28 > 29 __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) 30 { 31 struct pid_iter iter = {}; 32 u32 nr_running = 0, nr_threads = 0; 33 34 for_each_task_in_pidns(iter, ns) { 35 nr_threads++; 36 if (task_is_running(iter.task)) 37 nr_running++; 38 } 39 40 return (u64)nr_running << 32 | nr_threads; 41 } 42 > 43 __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) 44 { 45 return idr_get_cursor(&ns->idr) - 1; 46 } 47 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0