(I add Andrew to CC-list) On Thu, 28 Oct 2010 13:12:41 +0200 Dan Carpenter <error27@xxxxxxxxx> wrote: > The original code had a null dereference if alloc_percpu() failed. > This was introduced in 711d3d2c9bc3 "memcg: cpu hotplug aware percpu > count updates" > > Signed-off-by: Dan Carpenter <error27@xxxxxxxxx> > Acked-by: Daisuke Nishimura <nishimura@xxxxxxxxxxxxxxxxx> > diff --git a/mm/memcontrol.c b/mm/memcontrol.c > index 9a99cfa..2efa8ea 100644 > --- a/mm/memcontrol.c > +++ b/mm/memcontrol.c > @@ -4208,15 +4208,17 @@ static struct mem_cgroup *mem_cgroup_alloc(void) > > memset(mem, 0, size); > mem->stat = alloc_percpu(struct mem_cgroup_stat_cpu); > - if (!mem->stat) { > - if (size < PAGE_SIZE) > - kfree(mem); > - else > - vfree(mem); > - mem = NULL; > - } > + if (!mem->stat) > + goto out_free; > spin_lock_init(&mem->pcp_counter_lock); > return mem; > + > +out_free: > + if (size < PAGE_SIZE) > + kfree(mem); > + else > + vfree(mem); > + return NULL; > } > > /* -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxxx For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>