summaryrefslogtreecommitdiffstats
path: root/net/caif
diff options
context:
space:
mode:
authorEric Dumazet <eric.dumazet@gmail.com>2011-09-02 04:19:23 +0200
committerDavid S. Miller <davem@davemloft.net>2011-09-16 23:40:34 +0200
commit4fb66b8210c7d7147b164e19b1b44da916a75691 (patch)
tree203f37890eb96313224c7bf431622297b1a0601d /net/caif
parentsctp: deal with multiple COOKIE_ECHO chunks (diff)
downloadlinux-4fb66b8210c7d7147b164e19b1b44da916a75691.tar.xz
linux-4fb66b8210c7d7147b164e19b1b44da916a75691.zip
caif: fix a potential NULL dereference
Commit bd30ce4bc0b7 (caif: Use RCU instead of spin-lock in caif_dev.c) added a potential NULL dereference in case alloc_percpu() fails. caif_device_alloc() can also use GFP_KERNEL instead of GFP_ATOMIC. Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> CC: Sjur Brændeland <sjur.brandeland@stericsson.com> Acked-by: Sjur Brændeland <sjur.brandeland@stericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/caif')
-rw-r--r--net/caif/caif_dev.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/net/caif/caif_dev.c b/net/caif/caif_dev.c
index 7c2fa0a08148..7f9ac0742d19 100644
--- a/net/caif/caif_dev.c
+++ b/net/caif/caif_dev.c
@@ -93,10 +93,14 @@ static struct caif_device_entry *caif_device_alloc(struct net_device *dev)
caifdevs = caif_device_list(dev_net(dev));
BUG_ON(!caifdevs);
- caifd = kzalloc(sizeof(*caifd), GFP_ATOMIC);
+ caifd = kzalloc(sizeof(*caifd), GFP_KERNEL);
if (!caifd)
return NULL;
caifd->pcpu_refcnt = alloc_percpu(int);
+ if (!caifd->pcpu_refcnt) {
+ kfree(caifd);
+ return NULL;
+ }
caifd->netdev = dev;
dev_hold(dev);
return caifd;