From: Jesper Juhl Date: Mon, 14 Jan 2013 19:34:09 +0000 (+0100) Subject: IB: cxgb3: delay freeing mem untill entirely done with it X-Git-Tag: v3.9-rc1~113^2~5 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=fe194f19da971a114b0f65cf8267c1d42f3be87e;p=profile%2Fivi%2Fkernel-x86-ivi.git IB: cxgb3: delay freeing mem untill entirely done with it Sure, it's just the pointer value we use, but the coverity checker complains about a use-after-free bug and it really does seem cleaner to delay freeing until we are entirely done with the memory. So, rearrange the code to move the kfree() later untill we are completely done. Trivial and harmless, but nice IMHO. Signed-off-by: Jesper Juhl Reviewed-by: Steve Wise Signed-off-by: Jiri Kosina --- diff --git a/drivers/infiniband/hw/cxgb3/iwch_provider.c b/drivers/infiniband/hw/cxgb3/iwch_provider.c index 0bdf09a..145d82a 100644 --- a/drivers/infiniband/hw/cxgb3/iwch_provider.c +++ b/drivers/infiniband/hw/cxgb3/iwch_provider.c @@ -783,8 +783,8 @@ static int iwch_dealloc_mw(struct ib_mw *mw) mmid = (mw->rkey) >> 8; cxio_deallocate_window(&rhp->rdev, mhp->attr.stag); remove_handle(rhp, &rhp->mmidr, mmid); - kfree(mhp); PDBG("%s ib_mw %p mmid 0x%x ptr %p\n", __func__, mw, mmid, mhp); + kfree(mhp); return 0; }