On Wed, Jan 10, 2018 at 06:37:11PM +0000, Jean-Philippe Brucker wrote: > commit 57d72e159b60456c8bb281736c02ddd3164037aa upstream. > > Kasan reports a double free when finalise_stage_fn fails: the io_pgtable > ops are freed by arm_smmu_domain_finalise and then again by > arm_smmu_domain_free. Prevent this by leaving pgtbl_ops empty on failure. > > Fixes: 48ec83bcbcf5 ("iommu/arm-smmu: Add initial driver support for ARM SMMUv3 devices") > Signed-off-by: Jean-Philippe Brucker <jean-philippe.brucker@xxxxxxx> > --- > > The whitespaces got corrupted last time, sorry about that. Let's hope > this one works. It worked, thanks, now queued up. greg k-h