Received: by 2002:a25:7ec1:0:0:0:0:0 with SMTP id z184csp2122170ybc; Wed, 20 Nov 2019 09:13:37 -0800 (PST) X-Google-Smtp-Source: APXvYqwXtr2HaOZF/UVcG9vS0dYnbpl/lSpHaZ74U5Bs1zqs5hgzZXZkOArWI+WprWawBAOeK5n/ X-Received: by 2002:a1c:67d7:: with SMTP id b206mr4484464wmc.68.1574270017592; Wed, 20 Nov 2019 09:13:37 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1574270017; cv=none; d=google.com; s=arc-20160816; b=IsLVan7obe0PlYdcgTgnmtFfWW2Ojs2j5NyIWHBnKWoQNTpo1I0pyhg44TmkW6HLqV KoLjJ4M9yr3A/bolVhNYbJ3Cyk+/kKSDafDwsydjCzCsM+3SX1xcc2k5BtFIJVECl75/ 6lBDWq/OjQ53WRFTKpzeqC34G4VXQlQCY3zo597+1ZXlbT7ZWW8yTKdKepT+tnbUuxPO enuQREwXCmkbcO8Rua+kBKEd5hjrqjueWO/z+SivzaD8iZOpQuZU9I5DaP0RVXgP45VK ISqpTAhAFlJFwNLibk8Ylwfu1jp3dex/YJUGL105atSbT/IMqEMz3uXAaf2nB8lvkAOO r9pg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-language :content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:from:references:cc:to:subject; bh=3KYnk6Vi/m1l2mviunb84bTdORPSgxoeGjwNULy4g9I=; b=WghssZUw7Qw2EhefeuN9ZaP/PRwUckDFYd3daa8gcOFW8XqS4J+krGvj6TX4162XZh PlXZV9H0zhM9pY4SM+ZfHqV7y8+m1yzRhsmy9sxmxrN7RqHOTYm9ACzt2mcPuORhrslj 7+6FOMrKBn8VS/S1qvLnzsR80cLBznFk4ziSBm819LuTOX/TyGx6o5/HR+N1Q/oUtOKV f6Flet/WYKm5jy0E7SMztHnT0lqmZOPbHpn2LZwH2uannKqBbi8MPqYtv2DGXZacwNSk 0IyI6zrcVhz0TZcNsiLqjcS5L2qtZJ0rQzlY8HX6GgdKwkTWJUxx7vm9DHtHCgNmgeHh kyTg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=alibaba.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id s35si18700684edd.261.2019.11.20.09.13.13; Wed, 20 Nov 2019 09:13:37 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=alibaba.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1731069AbfKTNqE (ORCPT + 99 others); Wed, 20 Nov 2019 08:46:04 -0500 Received: from out30-133.freemail.mail.aliyun.com ([115.124.30.133]:47412 "EHLO out30-133.freemail.mail.aliyun.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727752AbfKTNqE (ORCPT ); Wed, 20 Nov 2019 08:46:04 -0500 X-Alimail-AntiSpam: AC=PASS;BC=-1|-1;BR=01201311R451e4;CH=green;DM=||false|;FP=0|-1|-1|-1|0|-1|-1|-1;HT=e01e04395;MF=wenyang@linux.alibaba.com;NM=1;PH=DS;RN=5;SR=0;TI=SMTPD_---0TiePzzo_1574257561; Received: from IT-C02W23QPG8WN.local(mailfrom:wenyang@linux.alibaba.com fp:SMTPD_---0TiePzzo_1574257561) by smtp.aliyun-inc.com(127.0.0.1); Wed, 20 Nov 2019 21:46:01 +0800 Subject: Re: [PATCH] intel_th: avoid double free in error flow To: Alexander Shishkin Cc: zhiche.yy@alibaba-inc.com, xlpang@linux.alibaba.com, Greg Kroah-Hartman , linux-kernel@vger.kernel.org References: <20191119173447.2454-1-wenyang@linux.alibaba.com> <87y2wad7e5.fsf@ashishki-desk.ger.corp.intel.com> <7e2a501f-955a-5bd1-f70d-ad69e7223981@linux.alibaba.com> <87v9red5x7.fsf@ashishki-desk.ger.corp.intel.com> From: Wen Yang Message-ID: <08c38d22-196d-a12e-f3e1-bc67f5912cb5@linux.alibaba.com> Date: Wed, 20 Nov 2019 21:46:00 +0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:68.0) Gecko/20100101 Thunderbird/68.1.1 MIME-Version: 1.0 In-Reply-To: <87v9red5x7.fsf@ashishki-desk.ger.corp.intel.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 2019/11/20 9:38 下午, Alexander Shishkin wrote: > Wen Yang writes: > >> Another example after a few lines lower: >> >>         err = device_add(&thdev->dev); >> >>         if (err) { >>                  put_device(&thdev->dev); >>                  goto fail_free_res; >> >>          } >> >> device_add() has increased the reference count, >> >> so when it returns an error, an additional call to put_device() >> >> is needed here to reduce the reference count. >> >> So the code in this place is correct. > No, device_add() drops its own extra reference in case of error (as it > should), so in "if (err) ..." branch we still only have just one > reference before it goes free. > > Regards, > -- > Alex Well, ok, you are right. We just checked the code and device_add() does release the reference count. Thank you. -- Regards, Wen