Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Lv Yunlong f5ce59707d RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res ... [ Upstream commit 34b39efa5a ] In bnxt_qplib_alloc_res, it calls bnxt_qplib_alloc_dpi_tbl(). Inside bnxt_qplib_alloc_dpi_tbl, dpit->dbr_bar_reg_iomem is freed via pci_iounmap() in unmap_io error branch. After the callee returns err code, bnxt_qplib_alloc_res calls bnxt_qplib_free_res()->bnxt_qplib_free_dpi_tbl() in the fail branch. Then dpit->dbr_bar_reg_iomem is freed in the second time by pci_iounmap(). My patch set dpit->dbr_bar_reg_iomem to NULL after it is freed by pci_iounmap() in the first time, to avoid the double free. Fixes: 1ac5a40479 ("RDMA/bnxt_re: Add bnxt_re RoCE driver") Link: https://lore.kernel.org/r/20210426140614.6722-1-lyl2019@mail.ustc.edu.cn Signed-off-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn> Reviewed-by: Leon Romanovsky <leonro@nvidia.com> Acked-by: Devesh Sharma <devesh.sharma@broadcom.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		History 2021-05-14 09:50:44 +02:00
..
core	RDMA/core: Add CM to restrack after successful attachment to a device	2021-05-14 09:50:42 +02:00
hw	RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res	2021-05-14 09:50:44 +02:00
sw	RDMA/siw: Fix a use after free in siw_alloc_mr	2021-05-14 09:50:44 +02:00
ulp	RDMA/rtrs-clt: destroy sysfs after removing session from active list	2021-05-14 09:50:36 +02:00
Kconfig	RMDA/sw: Don't allow drivers using dma_virt_ops on highmem configs	2020-11-12 13:27:41 -04:00
Makefile	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00