Re: [PATCH] binderfs: free minor on binder-control creation failure
Alice Ryhl <[email protected]>
| Newsgroups | org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Aug 06, 2026 at 07:23:38PM +0800, Chao Huang wrote: > From: Chao Huang <[email protected]> > > binderfs_binder_ctl_create() allocates a minor before creating the > binder-control dentry. If d_alloc_name() fails, the error path frees the > device and drops the inode, but leaves the minor allocated in > binderfs_minors. Repeated failures can therefore exhaust the global minor > IDA. > > Initialize minor to an invalid value and release it from the common error > path after a successful allocation. > > Signed-off-by: Chao Huang <[email protected]> Thanks! Please fix drivers/android/binder/rust_binderfs.c as well. Alice