mirror of https://gitee.com/openkylin/linux.git
d9d5713ca6
There is a path in handle_vq() where kmem_cache_free() can be called with pointer to a local variable. It can happen if vq_repbuf_alloc() failed to allocate memory from cache and req is NULL. The patch adds check if cache memory was allocated before freeing it. Found by Linux Driver Verification project (linuxtesting.org). Signed-off-by: Svetlana Mavrina <another.karnil@gmail.com> Reviewed-by: Alexey Khoroshilov <khoroshilov@ispras.ru> Signed-off-by: Roland Dreier <roland@purestorage.com> |
||
|---|---|---|
| .. | ||
| Kbuild | ||
| Kconfig | ||
| c2.c | ||
| c2.h | ||
| c2_ae.c | ||
| c2_ae.h | ||
| c2_alloc.c | ||
| c2_cm.c | ||
| c2_cq.c | ||
| c2_intr.c | ||
| c2_mm.c | ||
| c2_mq.c | ||
| c2_mq.h | ||
| c2_pd.c | ||
| c2_provider.c | ||
| c2_provider.h | ||
| c2_qp.c | ||
| c2_rnic.c | ||
| c2_status.h | ||
| c2_user.h | ||
| c2_vq.c | ||
| c2_vq.h | ||
| c2_wr.h | ||