Message ID | 20190911040452.8341-4-david@gibson.dropbear.id.au (mailing list archive) |
---|---|
State | New, archived |
Headers | show |
Series | spapr: CAS and reset cleanup preliminaries | expand |
On 11/09/2019 06:04, David Gibson wrote: > From: Alexey Kardashevskiy <aik@ozlabs.ru> > > Add a missing g_free(fdt) if the resulting tree is bigger > than the space allocated by SLOF. > > Signed-off-by: Alexey Kardashevskiy <aik@ozlabs.ru> > Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Reviewed-by: Cédric Le Goater <clg@kaod.org> Thanks, C. > --- > hw/ppc/spapr.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/hw/ppc/spapr.c b/hw/ppc/spapr.c > index e03e874d94..d93dacd483 100644 > --- a/hw/ppc/spapr.c > +++ b/hw/ppc/spapr.c > @@ -1024,6 +1024,7 @@ int spapr_h_cas_compose_response(SpaprMachineState *spapr, > _FDT((fdt_pack(fdt))); > > if (fdt_totalsize(fdt) + sizeof(hdr) > size) { > + g_free(fdt); > trace_spapr_cas_failed(size); > return -1; > } >
On Wed, 11 Sep 2019 14:04:48 +1000 David Gibson <david@gibson.dropbear.id.au> wrote: > From: Alexey Kardashevskiy <aik@ozlabs.ru> > > Add a missing g_free(fdt) if the resulting tree is bigger > than the space allocated by SLOF. > > Signed-off-by: Alexey Kardashevskiy <aik@ozlabs.ru> > Signed-off-by: David Gibson <david@gibson.dropbear.id.au> > --- Reviewed-by: Greg Kurz <groug@kaod.org> > hw/ppc/spapr.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/hw/ppc/spapr.c b/hw/ppc/spapr.c > index e03e874d94..d93dacd483 100644 > --- a/hw/ppc/spapr.c > +++ b/hw/ppc/spapr.c > @@ -1024,6 +1024,7 @@ int spapr_h_cas_compose_response(SpaprMachineState *spapr, > _FDT((fdt_pack(fdt))); > > if (fdt_totalsize(fdt) + sizeof(hdr) > size) { > + g_free(fdt); > trace_spapr_cas_failed(size); > return -1; > }
diff --git a/hw/ppc/spapr.c b/hw/ppc/spapr.c index e03e874d94..d93dacd483 100644 --- a/hw/ppc/spapr.c +++ b/hw/ppc/spapr.c @@ -1024,6 +1024,7 @@ int spapr_h_cas_compose_response(SpaprMachineState *spapr, _FDT((fdt_pack(fdt))); if (fdt_totalsize(fdt) + sizeof(hdr) > size) { + g_free(fdt); trace_spapr_cas_failed(size); return -1; }