linux-kernel - Re: [PATCH 1/1] Drivers: hv: balloon: Fix a memory leak

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <50C965EA.80905@redhat.com>
Date:	Thu, 13 Dec 2012 13:21:46 +0800
From:	Jason Wang <jasowang@...hat.com>
To:	"K. Y. Srinivasan" <kys@...rosoft.com>
CC:	gregkh@...uxfoundation.org, linux-kernel@...r.kernel.org,
	devel@...uxdriverproject.org, olaf@...fle.de, apw@...onical.com
Subject: Re: [PATCH 1/1] Drivers: hv: balloon: Fix a memory leak

On 12/12/2012 03:07 AM, K. Y. Srinivasan wrote:
> The send buffer was being leaked; fix it.
>
> Signed-off-by: K. Y. Srinivasan <kys@...rosoft.com>
> Reviewed-by: Haiyang Zhang <haiyangz@...rosoft.com>
> Reported-by: Jason Wang <jasowang@...hat.com>
> ---
>  drivers/hv/hv_balloon.c |   23 +++++++++++++----------
>  1 files changed, 13 insertions(+), 10 deletions(-)

Thanks.

Acked-by: Jason Wang <jasowang@...hat.com>
> diff --git a/drivers/hv/hv_balloon.c b/drivers/hv/hv_balloon.c
> index 00c8447..c02a33e 100644
> --- a/drivers/hv/hv_balloon.c
> +++ b/drivers/hv/hv_balloon.c
> @@ -882,7 +882,7 @@ static int balloon_probe(struct hv_device *dev,
>  			balloon_onchannelcallback, dev);
>  
>  	if (ret)
> -		return ret;
> +		goto probe_error0;
>  
>  	dm_device.dev = dev;
>  	dm_device.state = DM_INITIALIZING;
> @@ -894,7 +894,7 @@ static int balloon_probe(struct hv_device *dev,
>  		 kthread_run(dm_thread_func, &dm_device, "hv_balloon");
>  	if (IS_ERR(dm_device.thread)) {
>  		ret = PTR_ERR(dm_device.thread);
> -		goto probe_error0;
> +		goto probe_error1;
>  	}
>  
>  	hv_set_drvdata(dev, &dm_device);
> @@ -917,12 +917,12 @@ static int balloon_probe(struct hv_device *dev,
>  				VM_PKT_DATA_INBAND,
>  				VMBUS_DATA_PACKET_FLAG_COMPLETION_REQUESTED);
>  	if (ret)
> -		goto probe_error1;
> +		goto probe_error2;
>  
>  	t = wait_for_completion_timeout(&dm_device.host_event, 5*HZ);
>  	if (t == 0) {
>  		ret = -ETIMEDOUT;
> -		goto probe_error1;
> +		goto probe_error2;
>  	}
>  
>  	/*
> @@ -931,7 +931,7 @@ static int balloon_probe(struct hv_device *dev,
>  	 */
>  	if (dm_device.state == DM_INIT_ERROR) {
>  		ret = -ETIMEDOUT;
> -		goto probe_error1;
> +		goto probe_error2;
>  	}
>  	/*
>  	 * Now submit our capabilities to the host.
> @@ -964,12 +964,12 @@ static int balloon_probe(struct hv_device *dev,
>  				VM_PKT_DATA_INBAND,
>  				VMBUS_DATA_PACKET_FLAG_COMPLETION_REQUESTED);
>  	if (ret)
> -		goto probe_error1;
> +		goto probe_error2;
>  
>  	t = wait_for_completion_timeout(&dm_device.host_event, 5*HZ);
>  	if (t == 0) {
>  		ret = -ETIMEDOUT;
> -		goto probe_error1;
> +		goto probe_error2;
>  	}
>  
>  	/*
> @@ -978,18 +978,20 @@ static int balloon_probe(struct hv_device *dev,
>  	 */
>  	if (dm_device.state == DM_INIT_ERROR) {
>  		ret = -ETIMEDOUT;
> -		goto probe_error1;
> +		goto probe_error2;
>  	}
>  
>  	dm_device.state = DM_INITIALIZED;
>  
>  	return 0;
>  
> -probe_error1:
> +probe_error2:
>  	kthread_stop(dm_device.thread);
>  
> -probe_error0:
> +probe_error1:
>  	vmbus_close(dev->channel);
> +probe_error0:
> +	kfree(send_buffer);
>  	return ret;
>  }
>  
> @@ -1002,6 +1004,7 @@ static int balloon_remove(struct hv_device *dev)
>  
>  	vmbus_close(dev->channel);
>  	kthread_stop(dm->thread);
> +	kfree(send_buffer);
>  
>  	return 0;
>  }

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/