net/mlx5: Don't use already freed action pointer
[ Upstream commit 80b2bd737d0e833e6a2b77e482e5a714a79c86a4 ]
The call to mlx5dr_action_destroy() releases "action" memory. That
pointer is set to miss_action later and generates the following smatch
error:
drivers/net/ethernet/mellanox/mlx5/core/steering/fs_dr.c:53 set_miss_action()
warn: 'action' was already freed.
Make sure that the pointer is always valid by setting NULL after destroy.
Fixes: 6a48faeeca
("net/mlx5: Add direct rule fs_cmd implementation")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Saeed Mahameed <saeedm@nvidia.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:

committed by
Greg Kroah-Hartman

parent
bf2af9b243
commit
ea5edd015f
@@ -43,11 +43,10 @@ static int set_miss_action(struct mlx5_flow_root_namespace *ns,
|
|||||||
err = mlx5dr_table_set_miss_action(ft->fs_dr_table.dr_table, action);
|
err = mlx5dr_table_set_miss_action(ft->fs_dr_table.dr_table, action);
|
||||||
if (err && action) {
|
if (err && action) {
|
||||||
err = mlx5dr_action_destroy(action);
|
err = mlx5dr_action_destroy(action);
|
||||||
if (err) {
|
if (err)
|
||||||
|
mlx5_core_err(ns->dev,
|
||||||
|
"Failed to destroy action (%d)\n", err);
|
||||||
action = NULL;
|
action = NULL;
|
||||||
mlx5_core_err(ns->dev, "Failed to destroy action (%d)\n",
|
|
||||||
err);
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
ft->fs_dr_table.miss_action = action;
|
ft->fs_dr_table.miss_action = action;
|
||||||
if (old_miss_action) {
|
if (old_miss_action) {
|
||||||
|
Reference in New Issue
Block a user