diff options
| author | Xiaotian Feng <dfeng@redhat.com> | 2009-11-04 21:43:51 -0500 |
|---|---|---|
| committer | Ingo Molnar <mingo@elte.hu> | 2009-11-08 06:48:58 -0500 |
| commit | de2a47cf2b3f59ef9664b277f4021b91af13598e (patch) | |
| tree | a1bb79104018eb6f68047f405912876328fb5e70 | |
| parent | f1b291d4c47440cbfc1a478e88800e2742d60a80 (diff) | |
x86: Fix error return sequence in __ioremap_caller()
kernel missed to free memtype if get_vm_area_caller failed in
__ioremap_caller.
This patch introduces error path to fix this and cleans up the
repetitive error return sequences that contributed to the
creation of the bug.
Signed-off-by: Xiaotian Feng <dfeng@redhat.com>
Acked-by: Suresh Siddha <suresh.b.siddha@intel.com>
Cc: Venkatesh Pallipadi <venkatesh.pallipadi@intel.com>
Cc: H. Peter Anvin <hpa@zytor.com>
LKML-Reference: <1257389031-20429-1-git-send-email-dfeng@redhat.com>
Signed-off-by: Ingo Molnar <mingo@elte.hu>
| -rw-r--r-- | arch/x86/mm/ioremap.c | 24 |
1 files changed, 11 insertions, 13 deletions
diff --git a/arch/x86/mm/ioremap.c b/arch/x86/mm/ioremap.c index 334e63ca7b2b..2feb9bdedaaf 100644 --- a/arch/x86/mm/ioremap.c +++ b/arch/x86/mm/ioremap.c | |||
| @@ -170,8 +170,7 @@ static void __iomem *__ioremap_caller(resource_size_t phys_addr, | |||
| 170 | (unsigned long long)phys_addr, | 170 | (unsigned long long)phys_addr, |
| 171 | (unsigned long long)(phys_addr + size), | 171 | (unsigned long long)(phys_addr + size), |
| 172 | prot_val, new_prot_val); | 172 | prot_val, new_prot_val); |
| 173 | free_memtype(phys_addr, phys_addr + size); | 173 | goto err_free_memtype; |
| 174 | return NULL; | ||
| 175 | } | 174 | } |
| 176 | prot_val = new_prot_val; | 175 | prot_val = new_prot_val; |
| 177 | } | 176 | } |
| @@ -197,26 +196,25 @@ static void __iomem *__ioremap_caller(resource_size_t phys_addr, | |||
| 197 | */ | 196 | */ |
| 198 | area = get_vm_area_caller(size, VM_IOREMAP, caller); | 197 | area = get_vm_area_caller(size, VM_IOREMAP, caller); |
| 199 | if (!area) | 198 | if (!area) |
| 200 | return NULL; | 199 | goto err_free_memtype; |
| 201 | area->phys_addr = phys_addr; | 200 | area->phys_addr = phys_addr; |
| 202 | vaddr = (unsigned long) area->addr; | 201 | vaddr = (unsigned long) area->addr; |
| 203 | 202 | ||
| 204 | if (kernel_map_sync_memtype(phys_addr, size, prot_val)) { | 203 | if (kernel_map_sync_memtype(phys_addr, size, prot_val)) |
| 205 | free_memtype(phys_addr, phys_addr + size); | 204 | goto err_free_area; |
| 206 | free_vm_area(area); | ||
| 207 | return NULL; | ||
| 208 | } | ||
| 209 | 205 | ||
| 210 | if (ioremap_page_range(vaddr, vaddr + size, phys_addr, prot)) { | 206 | if (ioremap_page_range(vaddr, vaddr + size, phys_addr, prot)) |
| 211 | free_memtype(phys_addr, phys_addr + size); | 207 | goto err_free_area; |
| 212 | free_vm_area(area); | ||
| 213 | return NULL; | ||
| 214 | } | ||
| 215 | 208 | ||
| 216 | ret_addr = (void __iomem *) (vaddr + offset); | 209 | ret_addr = (void __iomem *) (vaddr + offset); |
| 217 | mmiotrace_ioremap(unaligned_phys_addr, unaligned_size, ret_addr); | 210 | mmiotrace_ioremap(unaligned_phys_addr, unaligned_size, ret_addr); |
| 218 | 211 | ||
| 219 | return ret_addr; | 212 | return ret_addr; |
| 213 | err_free_area: | ||
| 214 | free_vm_area(area); | ||
| 215 | err_free_memtype: | ||
| 216 | free_memtype(phys_addr, phys_addr + size); | ||
| 217 | return NULL; | ||
| 220 | } | 218 | } |
| 221 | 219 | ||
| 222 | /** | 220 | /** |
