Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e4221314 authored by Roland Dreier's avatar Roland Dreier
Browse files

IB/mthca: Fix buddy->num_free allocation size 



The num_free field of mthca_buddy has a type of array of unsigned int
while it was allocated as an array of pointers.  On 64-bit platforms
this allocates twice more than required.  Fix this by allocating the
correct size for the type.

This is the same bug just fixed in mlx4 by Eli Cohen <eli@mellanox.co.il>.

Signed-off-by: default avatarRoland Dreier <roland@purestorage.com>
parent f470f8d4

drivers/infiniband/hw/mthca/mthca_mr.c

+1 −1
Original line number Diff line number Diff line
@@ -146,7 +146,7 @@ static int mthca_buddy_init(struct mthca_buddy *buddy, int max_order) 


	buddy->bits = kzalloc((buddy->max_order + 1) * sizeof (long *),

			      GFP_KERNEL);

	buddy->num_free = kzalloc((buddy->max_order + 1) * sizeof (int *),

	buddy->num_free = kcalloc((buddy->max_order + 1), sizeof *buddy->num_free,

				  GFP_KERNEL);

	if (!buddy->bits || !buddy->num_free)

		goto err_out;