On 12/9/20 6:03 AM, Zhu Yanjun wrote:
In the function xdp_umem_pin_pages, if npgs != umem->npgs and
npgs >= 0, the function xdp_umem_unpin_pages is called. In this
function, kfree is called to handle umem->pgs, and then in the
function xdp_umem_pin_pages, kfree is called again to handle
umem->pgs. Eventually, umem->pgs is freed twice.

Acked-by: Björn Töpel <bjorn.to...@intel.com>
Signed-off-by: Zhu Yanjun <yanjun....@intel.com>

Please also fix up the commit log according to Bjorn's prior feedback [0].
If it's just a cleanup, it should state so, the commit message right now
makes it sound like an actual double free bug.

  [0] 
https://lore.kernel.org/netdev/0fef898d-cf5e-ef1b-6c35-c98669e9e...@intel.com/

Reply via email to