diff options
| author | Thomas Fourier <fourier.thomas@gmail.com> | 2026-10-06 16:09:09 +0200 |
|---|---|---|
| committer | Paolo Abeni <pabeni@redhat.com> | 2026-10-13 15:48:29 +0200 |
| commit | 05b5019b01fb9443b09ae4ed34af1135a80a84c8 (patch) | |
| tree | 5c9c1245b00f6cee1658f33b14c00b4b4011bf6b /tools/include/uapi/linux/netdev.h | |
| parent | e4f25fd86c9925df67c803a8ec4e0273606ec0e5 (diff) | |
| download | linux-next-05b5019b01fb9443b09ae4ed34af1135a80a84c8.tar.gz linux-next-05b5019b01fb9443b09ae4ed34af1135a80a84c8.zip | |
net: alacritech: fix dma_free_coherent() in error path
In slic_init_stat_queue(), a series of coherent buffers is allocated
with the length size. The size is then stored in stq->mem_size for
normal deallocation. However, in the error path, stq->mem_size is also
used but is not initialized. This error may leave the freed buffers
mapped, leaking a resource and allowing the device to access freed
memory.
Change the length in error path to size.
Fixes: 60c140df15db ("net: ethernet: slicoss: add slicoss gigabit ethernet driver")
Signed-off-by: Thomas Fourier <fourier.thomas@gmail.com>
Reviewed-by: Daniel Machon <daniel.machon@microchip.com>
Link: https://patch.msgid.link/20261006140912.50828-2-fourier.thomas@gmail.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Diffstat (limited to 'tools/include/uapi/linux/netdev.h')
0 files changed, 0 insertions, 0 deletions