Commit 8a9f7d0d authored by Zhipeng Lu's avatar Zhipeng Lu Committed by openeuler-sync-bot
Browse files

IB/hfi1: Fix a memleak in init_credit_return 

stable inclusion
from stable-v5.10.211
commit 3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9HJPD
CVE: CVE-2024-26839

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3fa240bb6b2dbb3e7a3ee1440a4889cbb6207eb7



--------------------------------

[ Upstream commit 809aa64ebff51eb170ee31a95f83b2d21efa32e2 ]

When dma_alloc_coherent fails to allocate dd->cr_base[i].va,
init_credit_return should deallocate dd->cr_base and
dd->cr_base[i] that allocated before. Or those resources
would be never freed and a memleak is triggered.

Fixes: 77241056 ("IB/hfi1: add driver files")
Signed-off-by: default avatarZhipeng Lu <alexious@zju.edu.cn>
Link: https://lore.kernel.org/r/20240112085523.3731720-1-alexious@zju.edu.cn


Acked-by: default avatarDennis Dalessandro <dennis.dalessandro@cornelisnetworks.com>
Signed-off-by: default avatarLeon Romanovsky <leon@kernel.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarZhenzeng Su <suzhenzeng@huawei.com>
(cherry picked from commit dbc9145b)
parent 272e398d

drivers/infiniband/hw/hfi1/pio.c

+5 −1
Original line number Diff line number Diff line
@@ -2132,7 +2132,7 @@ int init_credit_return(struct hfi1_devdata *dd) 
				   "Unable to allocate credit return DMA range for NUMA %d\n",

				   i);

			ret = -ENOMEM;

			goto done;

			goto free_cr_base;

		}

	}

	set_dev_node(&dd->pcidev->dev, dd->node);
@@ -2140,6 +2140,10 @@ int init_credit_return(struct hfi1_devdata *dd) 
	ret = 0;

done:

	return ret;



free_cr_base:

	free_credit_return(dd);

	goto done;

}



void free_credit_return(struct hfi1_devdata *dd)