* [PATCH v2] rtw88: Fix some memory leaks
@ 2021-06-20 19:41 Larry Finger
2021-06-21 10:40 ` Pkshih
0 siblings, 1 reply; 4+ messages in thread
From: Larry Finger @ 2021-06-20 19:41 UTC (permalink / raw)
To: kvalo; +Cc: linux-wireless, Larry Finger, Stable
There are memory leaks of skb's from routines rtw_fw_c2h_cmd_rx_irqsafe()
and rtw_coex_info_response(), both arising from C2H operations. There are
no leaks from the buffers sent to mac80211.
Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
Cc: Stable <stable@vger.kernel.org>
---
v2 - add the missinf changelog.
---
drivers/net/wireless/realtek/rtw88/coex.c | 4 +++-
drivers/net/wireless/realtek/rtw88/fw.c | 2 ++
2 files changed, 5 insertions(+), 1 deletion(-)
diff --git a/drivers/net/wireless/realtek/rtw88/coex.c b/drivers/net/wireless/realtek/rtw88/coex.c
index cedbf3825848..e81bf5070183 100644
--- a/drivers/net/wireless/realtek/rtw88/coex.c
+++ b/drivers/net/wireless/realtek/rtw88/coex.c
@@ -591,8 +591,10 @@ void rtw_coex_info_response(struct rtw_dev *rtwdev, struct sk_buff *skb)
struct rtw_coex *coex = &rtwdev->coex;
u8 *payload = get_payload_from_coex_resp(skb);
- if (payload[0] != COEX_RESP_ACK_BY_WL_FW)
+ if (payload[0] != COEX_RESP_ACK_BY_WL_FW) {
+ dev_kfree_skb_any(skb);
return;
+ }
skb_queue_tail(&coex->queue, skb);
wake_up(&coex->wait);
diff --git a/drivers/net/wireless/realtek/rtw88/fw.c b/drivers/net/wireless/realtek/rtw88/fw.c
index 797b08b2a494..43525ad8543f 100644
--- a/drivers/net/wireless/realtek/rtw88/fw.c
+++ b/drivers/net/wireless/realtek/rtw88/fw.c
@@ -231,9 +231,11 @@ void rtw_fw_c2h_cmd_rx_irqsafe(struct rtw_dev *rtwdev, u32 pkt_offset,
switch (c2h->id) {
case C2H_BT_MP_INFO:
rtw_coex_info_response(rtwdev, skb);
+ dev_kfree_skb_any(skb);
break;
case C2H_WLAN_RFON:
complete(&rtwdev->lps_leave_check);
+ dev_kfree_skb_any(skb);
break;
default:
/* pass offset for further operation */
--
2.32.0
^ permalink raw reply related [flat|nested] 4+ messages in thread* RE: [PATCH v2] rtw88: Fix some memory leaks
2021-06-20 19:41 [PATCH v2] rtw88: Fix some memory leaks Larry Finger
@ 2021-06-21 10:40 ` Pkshih
2021-06-21 15:52 ` Larry Finger
0 siblings, 1 reply; 4+ messages in thread
From: Pkshih @ 2021-06-21 10:40 UTC (permalink / raw)
To: Larry Finger, kvalo@codeaurora.org; +Cc: linux-wireless@vger.kernel.org, Stable
> -----Original Message-----
> From: Larry Finger [mailto:larry.finger@gmail.com] On Behalf Of Larry Finger
> Sent: Monday, June 21, 2021 3:41 AM
> To: kvalo@codeaurora.org
> Cc: linux-wireless@vger.kernel.org; Larry Finger; Stable
> Subject: [PATCH v2] rtw88: Fix some memory leaks
>
> There are memory leaks of skb's from routines rtw_fw_c2h_cmd_rx_irqsafe()
> and rtw_coex_info_response(), both arising from C2H operations. There are
> no leaks from the buffers sent to mac80211.
>
> Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
> Cc: Stable <stable@vger.kernel.org>
> ---
> v2 - add the missinf changelog.
>
> ---
> drivers/net/wireless/realtek/rtw88/coex.c | 4 +++-
> drivers/net/wireless/realtek/rtw88/fw.c | 2 ++
> 2 files changed, 5 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/net/wireless/realtek/rtw88/coex.c b/drivers/net/wireless/realtek/rtw88/coex.c
> index cedbf3825848..e81bf5070183 100644
> --- a/drivers/net/wireless/realtek/rtw88/coex.c
> +++ b/drivers/net/wireless/realtek/rtw88/coex.c
> @@ -591,8 +591,10 @@ void rtw_coex_info_response(struct rtw_dev *rtwdev, struct sk_buff *skb)
> struct rtw_coex *coex = &rtwdev->coex;
> u8 *payload = get_payload_from_coex_resp(skb);
>
> - if (payload[0] != COEX_RESP_ACK_BY_WL_FW)
> + if (payload[0] != COEX_RESP_ACK_BY_WL_FW) {
> + dev_kfree_skb_any(skb);
> return;
> + }
>
> skb_queue_tail(&coex->queue, skb);
> wake_up(&coex->wait);
> diff --git a/drivers/net/wireless/realtek/rtw88/fw.c b/drivers/net/wireless/realtek/rtw88/fw.c
> index 797b08b2a494..43525ad8543f 100644
> --- a/drivers/net/wireless/realtek/rtw88/fw.c
> +++ b/drivers/net/wireless/realtek/rtw88/fw.c
> @@ -231,9 +231,11 @@ void rtw_fw_c2h_cmd_rx_irqsafe(struct rtw_dev *rtwdev, u32 pkt_offset,
> switch (c2h->id) {
> case C2H_BT_MP_INFO:
> rtw_coex_info_response(rtwdev, skb);
> + dev_kfree_skb_any(skb);
The rtw_coex_info_response() puts skb into a skb_queue, so we can't free it here.
Instead, we should free it after we dequeue and do thing.
So, we send another patch:
https://lore.kernel.org/linux-wireless/20210621103023.41928-1-pkshih@realtek.com/T/#u
I hope this isn't confusing you.
> break;
> case C2H_WLAN_RFON:
> complete(&rtwdev->lps_leave_check);
> + dev_kfree_skb_any(skb);
> break;
> default:
> /* pass offset for further operation */
> --
> 2.32.0
--
Ping-Ke
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: [PATCH v2] rtw88: Fix some memory leaks
2021-06-21 10:40 ` Pkshih
@ 2021-06-21 15:52 ` Larry Finger
2021-06-22 6:26 ` Kalle Valo
0 siblings, 1 reply; 4+ messages in thread
From: Larry Finger @ 2021-06-21 15:52 UTC (permalink / raw)
To: Pkshih, kvalo@codeaurora.org; +Cc: linux-wireless@vger.kernel.org, Stable
On 6/21/21 5:40 AM, Pkshih wrote:
>
>
>> -----Original Message-----
>> From: Larry Finger [mailto:larry.finger@gmail.com] On Behalf Of Larry Finger
>> Sent: Monday, June 21, 2021 3:41 AM
>> To: kvalo@codeaurora.org
>> Cc: linux-wireless@vger.kernel.org; Larry Finger; Stable
>> Subject: [PATCH v2] rtw88: Fix some memory leaks
>>
>> There are memory leaks of skb's from routines rtw_fw_c2h_cmd_rx_irqsafe()
>> and rtw_coex_info_response(), both arising from C2H operations. There are
>> no leaks from the buffers sent to mac80211.
>>
>> Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
>> Cc: Stable <stable@vger.kernel.org>
>> ---
>> v2 - add the missinf changelog.
>>
>> ---
>> drivers/net/wireless/realtek/rtw88/coex.c | 4 +++-
>> drivers/net/wireless/realtek/rtw88/fw.c | 2 ++
>> 2 files changed, 5 insertions(+), 1 deletion(-)
>>
>> diff --git a/drivers/net/wireless/realtek/rtw88/coex.c b/drivers/net/wireless/realtek/rtw88/coex.c
>> index cedbf3825848..e81bf5070183 100644
>> --- a/drivers/net/wireless/realtek/rtw88/coex.c
>> +++ b/drivers/net/wireless/realtek/rtw88/coex.c
>> @@ -591,8 +591,10 @@ void rtw_coex_info_response(struct rtw_dev *rtwdev, struct sk_buff *skb)
>> struct rtw_coex *coex = &rtwdev->coex;
>> u8 *payload = get_payload_from_coex_resp(skb);
>>
>> - if (payload[0] != COEX_RESP_ACK_BY_WL_FW)
>> + if (payload[0] != COEX_RESP_ACK_BY_WL_FW) {
>> + dev_kfree_skb_any(skb);
>> return;
>> + }
>>
>> skb_queue_tail(&coex->queue, skb);
>> wake_up(&coex->wait);
>> diff --git a/drivers/net/wireless/realtek/rtw88/fw.c b/drivers/net/wireless/realtek/rtw88/fw.c
>> index 797b08b2a494..43525ad8543f 100644
>> --- a/drivers/net/wireless/realtek/rtw88/fw.c
>> +++ b/drivers/net/wireless/realtek/rtw88/fw.c
>> @@ -231,9 +231,11 @@ void rtw_fw_c2h_cmd_rx_irqsafe(struct rtw_dev *rtwdev, u32 pkt_offset,
>> switch (c2h->id) {
>> case C2H_BT_MP_INFO:
>> rtw_coex_info_response(rtwdev, skb);
>> + dev_kfree_skb_any(skb);
>
> The rtw_coex_info_response() puts skb into a skb_queue, so we can't free it here.
> Instead, we should free it after we dequeue and do thing.
> So, we send another patch:
> https://lore.kernel.org/linux-wireless/20210621103023.41928-1-pkshih@realtek.com/T/#u
>
> I hope this isn't confusing you.
No, it is not confusing. T=You fixed some leaks the I did not know existed.
Kalle: Take P-K's patch and discard mine.
Thanks,
Larry
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: [PATCH v2] rtw88: Fix some memory leaks
2021-06-21 15:52 ` Larry Finger
@ 2021-06-22 6:26 ` Kalle Valo
0 siblings, 0 replies; 4+ messages in thread
From: Kalle Valo @ 2021-06-22 6:26 UTC (permalink / raw)
To: Larry Finger; +Cc: Pkshih, linux-wireless@vger.kernel.org, Stable
Larry Finger <Larry.Finger@lwfinger.net> writes:
> On 6/21/21 5:40 AM, Pkshih wrote:
>>
>>
>>> -----Original Message-----
>>> From: Larry Finger [mailto:larry.finger@gmail.com] On Behalf Of Larry Finger
>>> Sent: Monday, June 21, 2021 3:41 AM
>>> To: kvalo@codeaurora.org
>>> Cc: linux-wireless@vger.kernel.org; Larry Finger; Stable
>>> Subject: [PATCH v2] rtw88: Fix some memory leaks
>>>
>>> There are memory leaks of skb's from routines rtw_fw_c2h_cmd_rx_irqsafe()
>>> and rtw_coex_info_response(), both arising from C2H operations. There are
>>> no leaks from the buffers sent to mac80211.
>>>
>>> Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
>>> Cc: Stable <stable@vger.kernel.org>
>>> ---
>>> v2 - add the missinf changelog.
>>>
>>> ---
>>> drivers/net/wireless/realtek/rtw88/coex.c | 4 +++-
>>> drivers/net/wireless/realtek/rtw88/fw.c | 2 ++
>>> 2 files changed, 5 insertions(+), 1 deletion(-)
>>>
>>> diff --git a/drivers/net/wireless/realtek/rtw88/coex.c b/drivers/net/wireless/realtek/rtw88/coex.c
>>> index cedbf3825848..e81bf5070183 100644
>>> --- a/drivers/net/wireless/realtek/rtw88/coex.c
>>> +++ b/drivers/net/wireless/realtek/rtw88/coex.c
>>> @@ -591,8 +591,10 @@ void rtw_coex_info_response(struct rtw_dev *rtwdev, struct sk_buff *skb)
>>> struct rtw_coex *coex = &rtwdev->coex;
>>> u8 *payload = get_payload_from_coex_resp(skb);
>>>
>>> - if (payload[0] != COEX_RESP_ACK_BY_WL_FW)
>>> + if (payload[0] != COEX_RESP_ACK_BY_WL_FW) {
>>> + dev_kfree_skb_any(skb);
>>> return;
>>> + }
>>>
>>> skb_queue_tail(&coex->queue, skb);
>>> wake_up(&coex->wait);
>>> diff --git a/drivers/net/wireless/realtek/rtw88/fw.c b/drivers/net/wireless/realtek/rtw88/fw.c
>>> index 797b08b2a494..43525ad8543f 100644
>>> --- a/drivers/net/wireless/realtek/rtw88/fw.c
>>> +++ b/drivers/net/wireless/realtek/rtw88/fw.c
>>> @@ -231,9 +231,11 @@ void rtw_fw_c2h_cmd_rx_irqsafe(struct rtw_dev *rtwdev, u32 pkt_offset,
>>> switch (c2h->id) {
>>> case C2H_BT_MP_INFO:
>>> rtw_coex_info_response(rtwdev, skb);
>>> + dev_kfree_skb_any(skb);
>>
>> The rtw_coex_info_response() puts skb into a skb_queue, so we can't free it here.
>> Instead, we should free it after we dequeue and do thing.
>> So, we send another patch:
>> https://lore.kernel.org/linux-wireless/20210621103023.41928-1-pkshih@realtek.com/T/#u
>>
>> I hope this isn't confusing you.
>
> No, it is not confusing. T=You fixed some leaks the I did not know existed.
>
> Kalle: Take P-K's patch and discard mine.
Will do, thank you for clear instructions :)
--
https://patchwork.kernel.org/project/linux-wireless/list/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2021-06-22 6:27 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-06-20 19:41 [PATCH v2] rtw88: Fix some memory leaks Larry Finger
2021-06-21 10:40 ` Pkshih
2021-06-21 15:52 ` Larry Finger
2021-06-22 6:26 ` Kalle Valo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).