Commit 4831ca9e authored Sep 08, 2017 by Colin Ian King Committed by Doug Ledford Oct 09, 2017

IB/rxe: check for allocation failure on elem



The allocation for elem may fail (especially because we're using
GFP_ATOMIC) so best to check for a null return.  This fixes a potential
null pointer dereference when assigning elem->pool.

Detected by CoverityScan CID#1357507 ("Dereference null return value")

Fixes: 8700e3e7 ("Soft RoCE driver")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>

parent 4988be58

drivers/infiniband/sw/rxe/rxe_pool.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -404,6 +404,8 @@ void rxe_alloc(struct rxe_pool pool)
		elem = kmem_cache_zalloc(pool_cache(pool),
		(pool->flags & RXE_POOL_ATOMIC) ?
		GFP_ATOMIC : GFP_KERNEL);
		if (!elem)
		return NULL;

		elem->pool = pool;
		kref_init(&elem->ref_cnt);

Admin message