crypto: nitrox - avoid double free on error path in nitrox_sriov_init()
[ Upstream commit 094528b6a5a755b1195a01e10b13597d67d1a0e6 ] If alloc_workqueue() fails in nitrox_mbox_init() it deallocates ndev->iov.vfdev and returns error code, but then nitrox_sriov_init() calls nitrox_sriov_cleanup() where ndev->iov.vfdev is deallocated again. Fix this by nulling ndev->iov.vfdev after the first deallocation. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: 9e5de3e06e54 ("crypto: cavium/nitrox - Add mailbox...") Signed-off-by: Natalia Petrova <n.petrova@fintech.ru> Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:
parent
7efc0d39ee
commit
9bdf3a59b3
@ -191,6 +191,7 @@ int nitrox_mbox_init(struct nitrox_device *ndev)
|
||||
ndev->iov.pf2vf_wq = alloc_workqueue("nitrox_pf2vf", 0, 0);
|
||||
if (!ndev->iov.pf2vf_wq) {
|
||||
kfree(ndev->iov.vfdev);
|
||||
ndev->iov.vfdev = NULL;
|
||||
return -ENOMEM;
|
||||
}
|
||||
/* enable pf2vf mailbox interrupts */
|
||||
|
Loading…
x
Reference in New Issue
Block a user