* [PATCHv2 0/2] mtd: concat: use flex array
@ 2026-03-05 22:44 Rosen Penev
2026-03-05 22:44 ` [PATCHv2 1/2] mtd: virt_concat: use single allocation for node Rosen Penev
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Rosen Penev @ 2026-03-05 22:44 UTC (permalink / raw)
To: linux-mtd
Cc: Miquel Raynal, Richard Weinberger, Vignesh Raghavendra, Kees Cook,
Gustavo A. R. Silva, open list,
open list:KERNEL HARDENING (not covered by other areas):Keyword:b__counted_by(_le|_be)?b
Simplifies allocation. There may or may not be missing frees here. One
allocation is simpler to reason about.
v2: fix mistake in counted_by in first commit directly.
Rosen Penev (2):
mtd: virt_concat: use single allocation for node
mtd: concat: replace alloc + calloc with 1 alloc
drivers/mtd/mtd_virt_concat.c | 19 +++----------------
drivers/mtd/mtdconcat.c | 5 +----
include/linux/mtd/concat.h | 2 +-
3 files changed, 5 insertions(+), 21 deletions(-)
--
2.53.0
______________________________________________________
Linux MTD discussion mailing list
http://lists.infradead.org/mailman/listinfo/linux-mtd/
^ permalink raw reply [flat|nested] 4+ messages in thread
* [PATCHv2 1/2] mtd: virt_concat: use single allocation for node
2026-03-05 22:44 [PATCHv2 0/2] mtd: concat: use flex array Rosen Penev
@ 2026-03-05 22:44 ` Rosen Penev
2026-03-05 22:44 ` [PATCHv2 2/2] mtd: concat: replace alloc + calloc with 1 alloc Rosen Penev
2026-03-11 15:25 ` [PATCHv2 0/2] mtd: concat: use flex array Miquel Raynal
2 siblings, 0 replies; 4+ messages in thread
From: Rosen Penev @ 2026-03-05 22:44 UTC (permalink / raw)
To: linux-mtd
Cc: Miquel Raynal, Richard Weinberger, Vignesh Raghavendra, Kees Cook,
Gustavo A. R. Silva, open list,
open list:KERNEL HARDENING (not covered by other areas):Keyword:b__counted_by(_le|_be)?b
Simpler to reason about and avoids having to free nodes separately.
Also add __counted_by attribute for extra runtime analysis.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
---
drivers/mtd/mtd_virt_concat.c | 11 ++---------
1 file changed, 2 insertions(+), 9 deletions(-)
diff --git a/drivers/mtd/mtd_virt_concat.c b/drivers/mtd/mtd_virt_concat.c
index aea88d1c9bc5..33f9a63dd450 100644
--- a/drivers/mtd/mtd_virt_concat.c
+++ b/drivers/mtd/mtd_virt_concat.c
@@ -31,8 +31,8 @@ static LIST_HEAD(concat_node_list);
struct mtd_virt_concat_node {
struct list_head head;
unsigned int count;
- struct device_node **nodes;
struct mtd_concat *concat;
+ struct device_node *nodes[] __counted_by(count);
};
/**
@@ -133,7 +133,6 @@ int mtd_virt_concat_destroy(struct mtd_info *mtd)
for (idx = 0; idx < item->count; idx++)
of_node_put(item->nodes[idx]);
- kfree(item->nodes);
kfree(item);
}
return 0;
@@ -167,16 +166,11 @@ static int mtd_virt_concat_create_item(struct device_node *parts,
return 0;
}
- item = kzalloc(sizeof(*item), GFP_KERNEL);
+ item = kzalloc_flex(*item, nodes, count, GFP_KERNEL);
if (!item)
return -ENOMEM;
item->count = count;
- item->nodes = kcalloc(count, sizeof(*item->nodes), GFP_KERNEL);
- if (!item->nodes) {
- kfree(item);
- return -ENOMEM;
- }
/*
* The partition in which "part-concat-next" property
@@ -216,7 +210,6 @@ void mtd_virt_concat_destroy_items(void)
for (i = 0; i < item->count; i++)
of_node_put(item->nodes[i]);
- kfree(item->nodes);
kfree(item);
}
}
--
2.53.0
______________________________________________________
Linux MTD discussion mailing list
http://lists.infradead.org/mailman/listinfo/linux-mtd/
^ permalink raw reply related [flat|nested] 4+ messages in thread
* [PATCHv2 2/2] mtd: concat: replace alloc + calloc with 1 alloc
2026-03-05 22:44 [PATCHv2 0/2] mtd: concat: use flex array Rosen Penev
2026-03-05 22:44 ` [PATCHv2 1/2] mtd: virt_concat: use single allocation for node Rosen Penev
@ 2026-03-05 22:44 ` Rosen Penev
2026-03-11 15:25 ` [PATCHv2 0/2] mtd: concat: use flex array Miquel Raynal
2 siblings, 0 replies; 4+ messages in thread
From: Rosen Penev @ 2026-03-05 22:44 UTC (permalink / raw)
To: linux-mtd
Cc: Miquel Raynal, Richard Weinberger, Vignesh Raghavendra, Kees Cook,
Gustavo A. R. Silva, open list,
open list:KERNEL HARDENING (not covered by other areas):Keyword:b__counted_by(_le|_be)?b
A flex array can be used to reduce the allocation to 1.
And actually mtdconcat was using the pointer + 1 trick to point to the
overallocated area. Better alternatives exist.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
---
drivers/mtd/mtd_virt_concat.c | 8 +-------
drivers/mtd/mtdconcat.c | 5 +----
include/linux/mtd/concat.h | 2 +-
3 files changed, 3 insertions(+), 12 deletions(-)
diff --git a/drivers/mtd/mtd_virt_concat.c b/drivers/mtd/mtd_virt_concat.c
index 33f9a63dd450..b56f2431974b 100644
--- a/drivers/mtd/mtd_virt_concat.c
+++ b/drivers/mtd/mtd_virt_concat.c
@@ -182,18 +182,12 @@ static int mtd_virt_concat_create_item(struct device_node *parts,
for (i = 1; i < count; i++)
item->nodes[i] = of_parse_phandle(parts, CONCAT_PROP, (i - 1));
- concat = kzalloc(sizeof(*concat), GFP_KERNEL);
+ concat = kzalloc_flex(*concat, subdev, count, GFP_KERNEL);
if (!concat) {
kfree(item);
return -ENOMEM;
}
- concat->subdev = kcalloc(count, sizeof(*concat->subdev), GFP_KERNEL);
- if (!concat->subdev) {
- kfree(item);
- kfree(concat);
- return -ENOMEM;
- }
item->concat = concat;
list_add_tail(&item->head, &concat_node_list);
diff --git a/drivers/mtd/mtdconcat.c b/drivers/mtd/mtdconcat.c
index 241d15235d01..c97167d51fe2 100644
--- a/drivers/mtd/mtdconcat.c
+++ b/drivers/mtd/mtdconcat.c
@@ -627,7 +627,6 @@ struct mtd_info *mtd_concat_create(struct mtd_info *subdev[], /* subdevices to c
const char *name)
{ /* name for the new device */
int i;
- size_t size;
struct mtd_concat *concat;
struct mtd_info *subdev_master = NULL;
uint32_t max_erasesize, curr_erasesize;
@@ -640,15 +639,13 @@ struct mtd_info *mtd_concat_create(struct mtd_info *subdev[], /* subdevices to c
printk(KERN_NOTICE "into device \"%s\"\n", name);
/* allocate the device structure */
- size = SIZEOF_STRUCT_MTD_CONCAT(num_devs);
- concat = kzalloc(size, GFP_KERNEL);
+ concat = kzalloc_flex(*concat, subdev, num_devs, GFP_KERNEL);
if (!concat) {
printk
("memory allocation error while creating concatenated device \"%s\"\n",
name);
return NULL;
}
- concat->subdev = (struct mtd_info **) (concat + 1);
/*
* Set up the new "super" device's MTD object structure, check for
diff --git a/include/linux/mtd/concat.h b/include/linux/mtd/concat.h
index 2cd9d48958a8..f8d4d6ac1fc1 100644
--- a/include/linux/mtd/concat.h
+++ b/include/linux/mtd/concat.h
@@ -18,7 +18,7 @@
struct mtd_concat {
struct mtd_info mtd;
int num_subdev;
- struct mtd_info **subdev;
+ struct mtd_info *subdev[];
};
struct mtd_info *mtd_concat_create(
--
2.53.0
______________________________________________________
Linux MTD discussion mailing list
http://lists.infradead.org/mailman/listinfo/linux-mtd/
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [PATCHv2 0/2] mtd: concat: use flex array
2026-03-05 22:44 [PATCHv2 0/2] mtd: concat: use flex array Rosen Penev
2026-03-05 22:44 ` [PATCHv2 1/2] mtd: virt_concat: use single allocation for node Rosen Penev
2026-03-05 22:44 ` [PATCHv2 2/2] mtd: concat: replace alloc + calloc with 1 alloc Rosen Penev
@ 2026-03-11 15:25 ` Miquel Raynal
2 siblings, 0 replies; 4+ messages in thread
From: Miquel Raynal @ 2026-03-11 15:25 UTC (permalink / raw)
To: linux-mtd, Rosen Penev
Cc: Richard Weinberger, Vignesh Raghavendra, Kees Cook,
Gustavo A. R. Silva, linux-kernel, linux-hardening
On Thu, 05 Mar 2026 14:44:08 -0800, Rosen Penev wrote:
> Simplifies allocation. There may or may not be missing frees here. One
> allocation is simpler to reason about.
>
> v2: fix mistake in counted_by in first commit directly.
>
> Rosen Penev (2):
> mtd: virt_concat: use single allocation for node
> mtd: concat: replace alloc + calloc with 1 alloc
>
> [...]
Applied to mtd/next, thanks!
[1/2] mtd: virt_concat: use single allocation for node
commit: c685e6e8d88d544e8c4429b06c3e6795cbba32dd
[2/2] mtd: concat: replace alloc + calloc with 1 alloc
commit: e19eaffc5213fdd6179e849d3032929fae0d8c2c
Patche(s) should be available on mtd/linux.git and will be
part of the next PR (provided that no robot complains by then).
Kind regards,
Miquèl
______________________________________________________
Linux MTD discussion mailing list
http://lists.infradead.org/mailman/listinfo/linux-mtd/
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-03-11 15:25 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-03-05 22:44 [PATCHv2 0/2] mtd: concat: use flex array Rosen Penev
2026-03-05 22:44 ` [PATCHv2 1/2] mtd: virt_concat: use single allocation for node Rosen Penev
2026-03-05 22:44 ` [PATCHv2 2/2] mtd: concat: replace alloc + calloc with 1 alloc Rosen Penev
2026-03-11 15:25 ` [PATCHv2 0/2] mtd: concat: use flex array Miquel Raynal
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox