Hi Felipe,
On Mon, 2010-02-15 at 16:59 +0100, Contreras Felipe (Nokia-D/Helsinki)
wrote:
> On Mon, Feb 15, 2010 at 04:36:31PM +0100, Ameya Palande wrote:
> > This patch fixes following issues:
> >
> > 1. pDMMRes was dereferenced and modified when it was already freed by
> > PROC_Ummap(). This results in memory corruption.
> >
> > 2.Instead of passing ulDSPAddr, ulDSPResAddr was passed to PROC_UnMap()
> > which will not retrieve correct DMMRes element.
>
> You forgot to mention that this patch applies on top of your previous
> reserve resource cleanup patches.
>
> > Signed-off-by: Ameya Palande <ameya.palande@xxxxxxxxx>
>
> And:
> Signed-off-by: Felipe Contreras <felipe.contreras@xxxxxxxxx>
>
> > ---
> > drivers/dsp/bridge/rmgr/drv.c | 15 +++++----------
> > 1 files changed, 5 insertions(+), 10 deletions(-)
> >
> > diff --git a/drivers/dsp/bridge/rmgr/drv.c b/drivers/dsp/bridge/rmgr/drv.c
> > index 9d5c077..747b34c 100644
> > --- a/drivers/dsp/bridge/rmgr/drv.c
> > +++ b/drivers/dsp/bridge/rmgr/drv.c
> > @@ -273,11 +273,14 @@ DSP_STATUS DRV_ProcFreeDMMRes(HANDLE hPCtxt)
> > pDMMList = pDMMList->next;
> > if (pDMMRes->dmmAllocated) {
> > status = PROC_UnMap(pDMMRes->hProcessor,
> > - (void *)pDMMRes->ulDSPResAddr, pCtxt);
> > + (void *)pDMMRes->ulDSPAddr, pCtxt);
> > + /*
> > + * PROC_UnMap has freed pDMMRes pointer, so don't access
> > + * it now
> > + */
>
> I don't see the need for this comment on the code.
In above code segment, just by looking at PROC_Unmap() it is not
apparent that it will deallocate "pDMMRes" thats why that comment is
present there! I guess this whole memory corruption could have been
easily avoided by presence of that comment ;)
Cheers,
Ameya.
--
To unsubscribe from this list: send the line "unsubscribe linux-omap" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
