The patch titled Subject: mm/nommu: fix error handling in split_vma() has been added to the -mm mm-unstable branch. Its filename is nommu-remove-uses-of-vma-linked-list-fix.patch This patch will shortly appear at https://git.kernel.org/pub/scm/linux/kernel/git/akpm/25-new.git/tree/patches/nommu-remove-uses-of-vma-linked-list-fix.patch This patch will later appear in the mm-unstable branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next via the mm-everything branch at git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm and is updated there every 2-3 working days ------------------------------------------------------ From: Yang Yingliang <yangyingliang@xxxxxxxxxx> Subject: mm/nommu: fix error handling in split_vma() Date: Wed, 24 Aug 2022 12:24:24 +0800 The memory allocated before calling mas_preallocate() is leaked if it fails. 'mas' won't be modify until calling mas_preallocate(), so move it up and add error label for free the memory. Link: https://lkml.kernel.org/r/20220824042424.2031508-1-yangyingliang@xxxxxxxxxx Fixes: 8aff7dbeaeb1 ("nommu: remove uses of VMA linked list") Signed-off-by: Yang Yingliang <yangyingliang@xxxxxxxxxx> Reviewed-by: Liam R. Howlett <Liam.Howlett@xxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- mm/nommu.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) --- a/mm/nommu.c~nommu-remove-uses-of-vma-linked-list-fix +++ a/mm/nommu.c @@ -1361,9 +1361,13 @@ int split_vma(struct mm_struct *mm, stru return -ENOMEM; new = vm_area_dup(vma); - if (!new) { - kmem_cache_free(vm_region_jar, region); - return -ENOMEM; + if (!new) + goto err_vma_dup; + + if (mas_preallocate(&mas, vma, GFP_KERNEL)) { + pr_warn("Allocation of vma tree for process %d failed\n", + current->pid); + goto err_mas_preallocate; } /* most fields are the same, copy all, and then fixup */ @@ -1394,11 +1398,6 @@ int split_vma(struct mm_struct *mm, stru add_nommu_region(vma->vm_region); add_nommu_region(new->vm_region); up_write(&nommu_region_sem); - if (mas_preallocate(&mas, vma, GFP_KERNEL)) { - pr_warn("Allocation of vma tree for process %d failed\n", - current->pid); - return -ENOMEM; - } setup_vma_to_mm(vma, mm); setup_vma_to_mm(new, mm); @@ -1406,6 +1405,12 @@ int split_vma(struct mm_struct *mm, stru mas_store(&mas, vma); vma_mas_store(new, &mas); return 0; + +err_mas_preallocate: + vm_area_free(new); +err_vma_dup: + kmem_cache_free(vm_region_jar, region); + return -ENOMEM; } /* _ Patches currently in -mm which might be from yangyingliang@xxxxxxxxxx are nommu-remove-uses-of-vma-linked-list-fix.patch