Unverified Commit f47bdabc authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!10636 RDMA/restrack: Fix potential invalid address access 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhengchao Shao <shaozhengchao@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/QDMWOENOVYM3E2HQYOGLERYNWU34HVNV/ 
 
https://gitee.com/src-openeuler/kernel/issues/IAGEOR 
 
Link:https://gitee.com/openeuler/kernel/pulls/10636

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parents 526ec594 e7012de5

drivers/infiniband/core/restrack.c

+1 −49
Original line number Diff line number Diff line
@@ -37,21 +37,6 @@ int rdma_restrack_init(struct ib_device *dev) 
	return 0;

}



static const char *type2str(enum rdma_restrack_type type)

{

	static const char * const names[RDMA_RESTRACK_MAX] = {

		[RDMA_RESTRACK_PD] = "PD",

		[RDMA_RESTRACK_CQ] = "CQ",

		[RDMA_RESTRACK_QP] = "QP",

		[RDMA_RESTRACK_CM_ID] = "CM_ID",

		[RDMA_RESTRACK_MR] = "MR",

		[RDMA_RESTRACK_CTX] = "CTX",

		[RDMA_RESTRACK_COUNTER] = "COUNTER",

	};



	return names[type];

};



/**

 * rdma_restrack_clean() - clean resource tracking

 * @dev:  IB device
@@ -59,47 +44,14 @@ static const char *type2str(enum rdma_restrack_type type) 
void rdma_restrack_clean(struct ib_device *dev)

{

	struct rdma_restrack_root *rt = dev->res;

	struct rdma_restrack_entry *e;

	char buf[TASK_COMM_LEN];

	bool found = false;

	const char *owner;

	int i;



	for (i = 0 ; i < RDMA_RESTRACK_MAX; i++) {

		struct xarray *xa = &dev->res[i].xa;



		if (!xa_empty(xa)) {

			unsigned long index;



			if (!found) {

				pr_err("restrack: %s", CUT_HERE);

				dev_err(&dev->dev, "BUG: RESTRACK detected leak of resources\n");

			}

			xa_for_each(xa, index, e) {

				if (rdma_is_kernel_res(e)) {

					owner = e->kern_name;

				} else {

					/*

					 * There is no need to call get_task_struct here,

					 * because we can be here only if there are more

					 * get_task_struct() call than put_task_struct().

					 */

					get_task_comm(buf, e->task);

					owner = buf;

				}



				pr_err("restrack: %s %s object allocated by %s is not freed\n",

				       rdma_is_kernel_res(e) ? "Kernel" :

							       "User",

				       type2str(e->type), owner);

			}

			found = true;

		}

		WARN_ON(!xa_empty(xa));

		xa_destroy(xa);

	}

	if (found)

		pr_err("restrack: %s", CUT_HERE);



	kfree(rt);

}