Return-path: Received: from mail-io0-f193.google.com ([209.85.223.193]:34725 "EHLO mail-io0-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751579AbbJYTbq (ORCPT ); Sun, 25 Oct 2015 15:31:46 -0400 MIME-Version: 1.0 In-Reply-To: <20151025191249.GB23928@kroah.com> References: <1445725885-25995-1-git-send-email-punitvara@gmail.com> <1445725885-25995-2-git-send-email-punitvara@gmail.com> <20151025191249.GB23928@kroah.com> Date: Mon, 26 Oct 2015 01:01:45 +0530 Message-ID: (sfid-20151025_203241_530265_BF0520B3) Subject: Re: [PATCH 1/3] staging: wilc1000: Remove reference preceded by free From: punit vara To: Greg KH Cc: johnny.kim@atmel.com, rachel.kim@atmel.com, chris.park@atmel.com, tony.cho@atmel.com, glen.lee@atmel.com, leo.kim@atmel.com, linux-wireless@vger.kernel.org, devel@driverdev.osuosl.org, linux-kernel@vger.kernel.org Content-Type: text/plain; charset=UTF-8 Sender: linux-wireless-owner@vger.kernel.org List-ID: On Mon, Oct 26, 2015 at 12:42 AM, Greg KH wrote: > On Sun, Oct 25, 2015 at 04:01:23AM +0530, Punit Vara wrote: >> This patch is to the wilc_wfi_cfgoperations.c file that fixes up >> following error reported by coccicheck: >> >> ERROR: reference preceded by free on line 1219 >> >> For (params->seq_len) <= 0 memory is already freed when >> (params->seq_len) >0 then memory was alloted. So there is no need to use >> kfree whenever params->seq_len <=0 remove it and place kfree inside >> (params->seq_len) >0 condition. >> >> Signed-off-by: Punit Vara >> --- >> drivers/staging/wilc1000/wilc_wfi_cfgoperations.c | 7 +++---- >> 1 file changed, 3 insertions(+), 4 deletions(-) >> >> diff --git a/drivers/staging/wilc1000/wilc_wfi_cfgoperations.c b/drivers/staging/wilc1000/wilc_wfi_cfgoperations.c >> index bcbf1bd..9b3cf04 100644 >> --- a/drivers/staging/wilc1000/wilc_wfi_cfgoperations.c >> +++ b/drivers/staging/wilc1000/wilc_wfi_cfgoperations.c >> @@ -1216,11 +1216,10 @@ static int add_key(struct wiphy *wiphy, struct net_device *netdev, u8 key_index, >> >> priv->wilc_ptk[key_index]->key = kmalloc(params->key_len, GFP_KERNEL); >> >> - kfree(priv->wilc_ptk[key_index]->seq); >> - >> - if ((params->seq_len) > 0) >> + if ((params->seq_len) > 0) { >> + kfree(priv->wilc_ptk[key_index]->seq); >> priv->wilc_ptk[key_index]->seq = kmalloc(params->seq_len, GFP_KERNEL); >> - >> + } > > Are you sure about this? It seems like you are changing the logic > here... > Yes this time I am quite confident here . On This file line no 1177 already freed the allocation of memory ..On the following line if (params->seq_len) > 0 then memory is allotted but if it is not then memory allocation remains free only. So here kfree is not required outside of the if condition. It should be inside the if condition because for (params->seq_len) > 0 memory is already allotted at line followed by 1177. Kindly look at it once. Thanks :-)