浏览代码

fix memory leaks in tracing_buffers_splice_read()

Cc: stable@vger.kernel.org
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Al Viro 9 年之前
父节点
当前提交
1ae2293dd6
共有 1 个文件被更改,包括 8 次插入6 次删除
  1. 8 6
      kernel/trace/trace.c

+ 8 - 6
kernel/trace/trace.c

@@ -5930,9 +5930,6 @@ tracing_buffers_splice_read(struct file *file, loff_t *ppos,
 		return -EBUSY;
 		return -EBUSY;
 #endif
 #endif
 
 
-	if (splice_grow_spd(pipe, &spd))
-		return -ENOMEM;
-
 	if (*ppos & (PAGE_SIZE - 1))
 	if (*ppos & (PAGE_SIZE - 1))
 		return -EINVAL;
 		return -EINVAL;
 
 
@@ -5942,6 +5939,9 @@ tracing_buffers_splice_read(struct file *file, loff_t *ppos,
 		len &= PAGE_MASK;
 		len &= PAGE_MASK;
 	}
 	}
 
 
+	if (splice_grow_spd(pipe, &spd))
+		return -ENOMEM;
+
  again:
  again:
 	trace_access_lock(iter->cpu_file);
 	trace_access_lock(iter->cpu_file);
 	entries = ring_buffer_entries_cpu(iter->trace_buffer->buffer, iter->cpu_file);
 	entries = ring_buffer_entries_cpu(iter->trace_buffer->buffer, iter->cpu_file);
@@ -5999,19 +5999,21 @@ tracing_buffers_splice_read(struct file *file, loff_t *ppos,
 	/* did we read anything? */
 	/* did we read anything? */
 	if (!spd.nr_pages) {
 	if (!spd.nr_pages) {
 		if (ret)
 		if (ret)
-			return ret;
+			goto out;
 
 
+		ret = -EAGAIN;
 		if ((file->f_flags & O_NONBLOCK) || (flags & SPLICE_F_NONBLOCK))
 		if ((file->f_flags & O_NONBLOCK) || (flags & SPLICE_F_NONBLOCK))
-			return -EAGAIN;
+			goto out;
 
 
 		ret = wait_on_pipe(iter, true);
 		ret = wait_on_pipe(iter, true);
 		if (ret)
 		if (ret)
-			return ret;
+			goto out;
 
 
 		goto again;
 		goto again;
 	}
 	}
 
 
 	ret = splice_to_pipe(pipe, &spd);
 	ret = splice_to_pipe(pipe, &spd);
+out:
 	splice_shrink_spd(&spd);
 	splice_shrink_spd(&spd);
 
 
 	return ret;
 	return ret;