On Thu, Feb 08, 2024 at 12:36:57PM +0300, Fedor Pchelkin wrote: > IO and WQE buffers are allocated once per HW and can be reused later. If > WQE buffers allocation fails then the whole allocation is marked as failed > but already created IO array internal objects are not freed. hw->io is > freed but not nullified in that specific case - it may become a problem > later as efct_hw_setup_io() is supposed to be reusable for the same HW. > > While at it, use kcalloc instead of kmalloc_array/memset-zero combination > and get rid of some needless NULL assignments: nullifying hw->io[i] > elements just before freeing hw->io is not really useful. > > Found by Linux Verification Center (linuxtesting.org). > > Fixes: 4df84e846624 ("scsi: elx: efct: Driver initialization routines") > Cc: stable@xxxxxxxxxxxxxxx > Signed-off-by: Fedor Pchelkin <pchelkin@xxxxxxxxx> The patch looks okay. Though I think this funktion leaks all over the place memory as soon we take the error path. Could you also prepare a fix for these path while you are at it? Thanks! Daniel