From: Jinjie Ruan Date: Sat, 26 Oct 2024 06:36:39 +0000 (+0800) Subject: genirq/msi: Fix off-by-one error in msi_domain_alloc() X-Git-Tag: v6.12-rc6~13^2~1 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5f994f534120f47432092fb36f5cb0c7a80ed2bf;p=thirdparty%2Flinux.git genirq/msi: Fix off-by-one error in msi_domain_alloc() The error path in msi_domain_alloc(), frees the already allocated MSI interrupts in a loop, but the loop condition terminates when the index reaches zero, which fails to free the first allocated MSI interrupt at index zero. Check for >= 0 so that msi[0] is freed as well. Fixes: f3cf8bb0d6c3 ("genirq: Add generic msi irq domain support") Signed-off-by: Jinjie Ruan Signed-off-by: Thomas Gleixner Link: https://lore.kernel.org/all/20241026063639.10711-1-ruanjinjie@huawei.com --- diff --git a/kernel/irq/msi.c b/kernel/irq/msi.c index 3a24d6b5f559c..396a067a8a56b 100644 --- a/kernel/irq/msi.c +++ b/kernel/irq/msi.c @@ -718,7 +718,7 @@ static int msi_domain_alloc(struct irq_domain *domain, unsigned int virq, ret = ops->msi_init(domain, info, virq + i, hwirq + i, arg); if (ret < 0) { if (ops->msi_free) { - for (i--; i > 0; i--) + for (i--; i >= 0; i--) ops->msi_free(domain, info, virq + i); } irq_domain_free_irqs_top(domain, virq, nr_irqs);