summaryrefslogtreecommitdiff
path: root/drivers/xen/gntdev.c
diff options
context:
space:
mode:
authorMark Brown <broonie@kernel.org>2026-07-03 16:21:32 +0100
committerMark Brown <broonie@kernel.org>2026-07-03 16:21:32 +0100
commit9b0932add9ea8df8788383d02a42c7f3ab78c0ce (patch)
treed7050252839f818639024008971169f46c16a21d /drivers/xen/gntdev.c
parentbe379ccbb7aa37be7596636c54b7197726453480 (diff)
parentfcd245ea7528d50fddffc0fd1308941a9180f5b3 (diff)
downloadlinux-next-9b0932add9ea8df8788383d02a42c7f3ab78c0ce.tar.gz
linux-next-9b0932add9ea8df8788383d02a42c7f3ab78c0ce.zip
Merge branch 'linux-next' of https://git.kernel.org/pub/scm/linux/kernel/git/xen/tip.git
Diffstat (limited to 'drivers/xen/gntdev.c')
-rw-r--r--drivers/xen/gntdev.c8
1 files changed, 6 insertions, 2 deletions
diff --git a/drivers/xen/gntdev.c b/drivers/xen/gntdev.c
index 61ea855c4508..1dcc4675580e 100644
--- a/drivers/xen/gntdev.c
+++ b/drivers/xen/gntdev.c
@@ -670,11 +670,15 @@ static long gntdev_ioctl_map_grant_ref(struct gntdev_priv *priv,
mutex_lock(&priv->lock);
gntdev_add_map(priv, map);
op.index = map->index << PAGE_SHIFT;
- mutex_unlock(&priv->lock);
- if (copy_to_user(u, &op, sizeof(op)) != 0)
+ if (copy_to_user(u, &op, sizeof(op)) != 0) {
+ list_del(&map->next);
+ mutex_unlock(&priv->lock);
+ gntdev_put_map(priv, map);
return -EFAULT;
+ }
+ mutex_unlock(&priv->lock);
return 0;
}