Linux-RDMA Archive on lore.kernel.org
 help / color / Atom feed
* Re: [RFC PATCH] RDMA/core: avoid potential memory leak in add_one_compat_dev
       [not found] <20200110153250.11898-1-guoqing.jiang@cloud.ionos.com>
@ 2020-01-10 15:34 ` Guoqing Jiang
  2020-01-10 15:55   ` Jason Gunthorpe
  0 siblings, 1 reply; 2+ messages in thread
From: Guoqing Jiang @ 2020-01-10 15:34 UTC (permalink / raw)
  To: jgq516, dledford, jgg; +Cc: Parav Pandit, linux-rdma

Forget to cc list, sorry.

On 1/10/20 4:32 PM, jgq516@gmail.com wrote:
> From: Guoqing Jiang <guoqing.jiang@cloud.ionos.com>
>
> In add_one_compat_dev, if failure happens after cdev is allocated,
> so we need to free the memory accordingly.
>
> Fixes: 4e0f7b9070726 ("RDMA/core: Implement compat device/sysfs tree in net namespace")
> Cc: Parav Pandit <parav@mellanox.com>
> Signed-off-by: Guoqing Jiang <guoqing.jiang@cloud.ionos.com>
> ---
> Hi,
>
> When reading the code, it looks no place to free cdev under those err condition.
> And I guess remove_one_compat_dev needs to free cdev as well, something like:
>
> @@ -937,6 +937,8 @@ static void remove_one_compat_dev(struct ib_device *device, u32 id)
>                  ib_free_port_attrs(cdev);
>                  device_del(&cdev->dev);
>                  put_device(&cdev->dev);
> +               kfree(cdev);
> +               cdev = NULL;
>          }
>   }
>
> But since I am not know well about the code, so this is RFC.
>
> Thanks,
> Guoqing
>
>   drivers/infiniband/core/device.c | 1 +
>   1 file changed, 1 insertion(+)
>
> diff --git a/drivers/infiniband/core/device.c b/drivers/infiniband/core/device.c
> index 84dd74fe13b8..dca8d9da4a75 100644
> --- a/drivers/infiniband/core/device.c
> +++ b/drivers/infiniband/core/device.c
> @@ -918,6 +918,7 @@ static int add_one_compat_dev(struct ib_device *device,
>   	device_del(&cdev->dev);
>   add_err:
>   	put_device(&cdev->dev);
> +	kfree(cdev);
>   cdev_err:
>   	xa_release(&device->compat_devs, rnet->id);
>   done:


^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [RFC PATCH] RDMA/core: avoid potential memory leak in add_one_compat_dev
  2020-01-10 15:34 ` [RFC PATCH] RDMA/core: avoid potential memory leak in add_one_compat_dev Guoqing Jiang
@ 2020-01-10 15:55   ` Jason Gunthorpe
  0 siblings, 0 replies; 2+ messages in thread
From: Jason Gunthorpe @ 2020-01-10 15:55 UTC (permalink / raw)
  To: Guoqing Jiang; +Cc: jgq516, dledford, Parav Pandit, linux-rdma

On Fri, Jan 10, 2020 at 04:34:08PM +0100, Guoqing Jiang wrote:
> Forget to cc list, sorry.
> 
> On 1/10/20 4:32 PM, jgq516@gmail.com wrote:
> > From: Guoqing Jiang <guoqing.jiang@cloud.ionos.com>
> > 
> > In add_one_compat_dev, if failure happens after cdev is allocated,
> > so we need to free the memory accordingly.
> > 
> > Fixes: 4e0f7b9070726 ("RDMA/core: Implement compat device/sysfs tree in net namespace")
> > Cc: Parav Pandit <parav@mellanox.com>
> > Signed-off-by: Guoqing Jiang <guoqing.jiang@cloud.ionos.com>
> > Hi,
> > 
> > When reading the code, it looks no place to free cdev under those err condition.
> > And I guess remove_one_compat_dev needs to free cdev as well, something like:
> > 
> > @@ -937,6 +937,8 @@ static void remove_one_compat_dev(struct ib_device *device, u32 id)
> >                  ib_free_port_attrs(cdev);
> >                  device_del(&cdev->dev);
> >                  put_device(&cdev->dev);
> > +               kfree(cdev);
> > +               cdev = NULL;
> >          }
> >   }
> > 
> > But since I am not know well about the code, so this is RFC.

put_device triggers compatdev_release which does the free

Jason

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, back to index

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
     [not found] <20200110153250.11898-1-guoqing.jiang@cloud.ionos.com>
2020-01-10 15:34 ` [RFC PATCH] RDMA/core: avoid potential memory leak in add_one_compat_dev Guoqing Jiang
2020-01-10 15:55   ` Jason Gunthorpe

Linux-RDMA Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/linux-rdma/0 linux-rdma/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 linux-rdma linux-rdma/ https://lore.kernel.org/linux-rdma \
		linux-rdma@vger.kernel.org
	public-inbox-index linux-rdma

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/org.kernel.vger.linux-rdma


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git