The patch titled Subject: fs/select.c: use struct_size() in kmalloc() has been added to the -mm tree. Its filename is fs-select-use-struct_size-in-kmalloc.patch This patch should soon appear at http://ozlabs.org/~akpm/mmots/broken-out/fs-select-use-struct_size-in-kmalloc.patch and later at http://ozlabs.org/~akpm/mmotm/broken-out/fs-select-use-struct_size-in-kmalloc.patch Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: "Gustavo A. R. Silva" <gustavo@xxxxxxxxxxxxxx> Subject: fs/select.c: use struct_size() in kmalloc() One of the more common cases of allocation size calculations is finding the size of a structure that has a zero-sized array at the end, along with memory for some number of elements for that array. For example: struct foo { int stuff; struct boo entry[]; }; size = sizeof(struct foo) + count * sizeof(struct boo); instance = kmalloc(size, GFP_KERNEL); Instead of leaving these open-coded and prone to type mistakes, we can now use the new struct_size() helper: instance = kmalloc(struct_size(instance, entry, count), GFP_KERNEL); Also, notice that variable size is unnecessary, hence it is removed. This code was detected with the help of Coccinelle. Link: http://lkml.kernel.org/r/20190604164226.GA13823@embeddedor Signed-off-by: Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> Reviewed-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- fs/select.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) --- a/fs/select.c~fs-select-use-struct_size-in-kmalloc +++ a/fs/select.c @@ -965,7 +965,7 @@ static int do_sys_poll(struct pollfd __u struct timespec64 *end_time) { struct poll_wqueues table; - int err = -EFAULT, fdcount, len, size; + int err = -EFAULT, fdcount, len; /* Allocate small arguments on the stack to save memory and be faster - use long to make sure the buffer is aligned properly on 64 bit archs to avoid unaligned access */ @@ -993,8 +993,8 @@ static int do_sys_poll(struct pollfd __u break; len = min(todo, POLLFD_PER_PAGE); - size = sizeof(struct poll_list) + sizeof(struct pollfd) * len; - walk = walk->next = kmalloc(size, GFP_KERNEL); + walk = walk->next = kmalloc(struct_size(walk, entries, len), + GFP_KERNEL); if (!walk) { err = -ENOMEM; goto out_fds; _ Patches currently in -mm which might be from gustavo@xxxxxxxxxxxxxx are fs-select-use-struct_size-in-kmalloc.patch