]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
net/mlx5: Check device memory pointer before usage
authorStav Aviram <saviram@nvidia.com>
Tue, 1 Jul 2025 12:08:12 +0000 (15:08 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 15 Aug 2025 10:04:57 +0000 (12:04 +0200)
[ Upstream commit 70f238c902b8c0461ae6fbb8d1a0bbddc4350eea ]

Add a NULL check before accessing device memory to prevent a crash if
dev->dm allocation in mlx5_init_once() fails.

Fixes: c9b9dcb430b3 ("net/mlx5: Move device memory management to mlx5_core")
Signed-off-by: Stav Aviram <saviram@nvidia.com>
Link: https://patch.msgid.link/c88711327f4d74d5cebc730dc629607e989ca187.1751370035.git.leon@kernel.org
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/infiniband/hw/mlx5/dm.c
drivers/net/ethernet/mellanox/mlx5/core/lib/dm.c
drivers/net/ethernet/mellanox/mlx5/core/main.c

index 3669c90b2dadc6ab40a80cc7fb1d0d06369b793c..672e5cfd2fca5d640292062aff7ebf94afa651c4 100644 (file)
@@ -282,7 +282,7 @@ static struct ib_dm *handle_alloc_dm_memic(struct ib_ucontext *ctx,
        int err;
        u64 address;
 
-       if (!MLX5_CAP_DEV_MEM(dm_db->dev, memic))
+       if (!dm_db || !MLX5_CAP_DEV_MEM(dm_db->dev, memic))
                return ERR_PTR(-EOPNOTSUPP);
 
        dm = kzalloc(sizeof(*dm), GFP_KERNEL);
index 9482e51ac82a585779bf81b92ec00e8f33595f9f..bdbbfaf504d988c3577b46da5249df33798f3670 100644 (file)
@@ -28,7 +28,7 @@ struct mlx5_dm *mlx5_dm_create(struct mlx5_core_dev *dev)
 
        dm = kzalloc(sizeof(*dm), GFP_KERNEL);
        if (!dm)
-               return ERR_PTR(-ENOMEM);
+               return NULL;
 
        spin_lock_init(&dm->lock);
 
@@ -80,7 +80,7 @@ err_modify_hdr:
 err_steering:
        kfree(dm);
 
-       return ERR_PTR(-ENOMEM);
+       return NULL;
 }
 
 void mlx5_dm_cleanup(struct mlx5_core_dev *dev)
index 8c9633f740b48514bbd30b0b8e90071bf7a1111c..a53f222e3feed4dacc785ae3033f936373b855d4 100644 (file)
@@ -1022,9 +1022,6 @@ static int mlx5_init_once(struct mlx5_core_dev *dev)
        }
 
        dev->dm = mlx5_dm_create(dev);
-       if (IS_ERR(dev->dm))
-               mlx5_core_warn(dev, "Failed to init device memory %ld\n", PTR_ERR(dev->dm));
-
        dev->tracer = mlx5_fw_tracer_create(dev);
        dev->hv_vhca = mlx5_hv_vhca_create(dev);
        dev->rsc_dump = mlx5_rsc_dump_create(dev);