Re: [PATCH] bnx2x: fix double free in bnx2x_init_firmware() error path
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <178725540964.453960.11612397406517093275.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Sat, 15 Aug 2026 20:21:49 +0800 you wrote: > bnx2x_init_firmware() frees bp->init_ops, bp->init_data and > bp->init_ops_offsets in its error path without setting them to NULL. > The cleanup function bnx2x_release_firmware() frees the same three > pointers unconditionally, so if init_firmware fails and > release_firmware is later called (e.g. from __bnx2x_remove or through > the function state machine), all three are freed a second time. > > [...] Here is the summary with links: - bnx2x: fix double free in bnx2x_init_firmware() error path https://git.kernel.org/netdev/net/c/d2796ffe38cb You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html