On Thu, Dec 07, 2023 at 05:34:10PM +0100, Joel Granados wrote:
> > @@ -58,6 +255,8 @@ static void hw_pagetable_fault_free(struct hw_pgtable_fault *fault)
> > WARN_ON(!list_empty(&fault->deliver));
> > WARN_ON(!list_empty(&fault->response));
> >
> > + fput(fault->fault_file);
> > + put_unused_fd(fault->fault_fd);
> I have resolved this in a naive way by just not calling the
> put_unused_fd function.
That is correct.
put_unused_fd() should only be called on error paths prior to the
syscall return.
The design of a FD must follow this pattern
syscall():
fdno = get_unused_fd_flags(O_CLOEXEC);
filep = [..]
// syscall MUST succeed after this statement:
fd_install(fdno, filep);
return 0;
err:
put_unused_fd(fdno)
return -ERRNO
Also the refcounting looks a little strange, the filep reference is
consumed by fd_install, so what is that fput pairing with in fault_free?
Jason
