3630473789
In ioat_channel_start(), if spdk_vtophys(ioat->comp_update) returns SPDK_VTOPHYS_ERROR, spdk_free is called to free ioat->comp_update, and ioat->comp_update is not set to NULL. However, the caller ioat_attach() will also call ioat_channel_destruct() to free ioat->comp_update, then double-free problem occurs. Here, we will not free ioat->comp_update in ioat_channel_start(), ioat_channel_destruct() will do that. Signed-off-by: Zhiqiang Liu <liuzhiqiang26@huawei.com> Change-Id: I3be19a3feec5c2188051ee67820bfd1e61de9b48 Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/8300 Community-CI: Mellanox Build Bot Reviewed-by: Changpeng Liu <changpeng.liu@intel.com> Reviewed-by: Aleksey Marchuk <alexeymar@mellanox.com> Tested-by: SPDK CI Jenkins <sys_sgci@intel.com> |
||
---|---|---|
.. | ||
ioat_internal.h | ||
ioat.c | ||
Makefile | ||
spdk_ioat.map |