diff options
| author | Eric Dumazet <eric.dumazet@gmail.com> | 2011-09-02 04:19:23 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2011-09-16 23:40:34 +0200 |
| commit | 4fb66b8210c7d7147b164e19b1b44da916a75691 (patch) | |
| tree | 203f37890eb96313224c7bf431622297b1a0601d /net | |
| parent | sctp: deal with multiple COOKIE_ECHO chunks (diff) | |
| download | linux-4fb66b8210c7d7147b164e19b1b44da916a75691.tar.xz linux-4fb66b8210c7d7147b164e19b1b44da916a75691.zip | |
caif: fix a potential NULL dereference
Commit bd30ce4bc0b7 (caif: Use RCU instead of spin-lock in caif_dev.c)
added a potential NULL dereference in case alloc_percpu() fails.
caif_device_alloc() can also use GFP_KERNEL instead of GFP_ATOMIC.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
CC: Sjur Brændeland <sjur.brandeland@stericsson.com>
Acked-by: Sjur Brændeland <sjur.brandeland@stericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
| -rw-r--r-- | net/caif/caif_dev.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/net/caif/caif_dev.c b/net/caif/caif_dev.c index 7c2fa0a08148..7f9ac0742d19 100644 --- a/net/caif/caif_dev.c +++ b/net/caif/caif_dev.c @@ -93,10 +93,14 @@ static struct caif_device_entry *caif_device_alloc(struct net_device *dev) caifdevs = caif_device_list(dev_net(dev)); BUG_ON(!caifdevs); - caifd = kzalloc(sizeof(*caifd), GFP_ATOMIC); + caifd = kzalloc(sizeof(*caifd), GFP_KERNEL); if (!caifd) return NULL; caifd->pcpu_refcnt = alloc_percpu(int); + if (!caifd->pcpu_refcnt) { + kfree(caifd); + return NULL; + } caifd->netdev = dev; dev_hold(dev); return caifd; |