mail archive of the barebox mailing list
 help / color / mirror / Atom feed
* [PATCH] dm: fix memory leak
@ 2025-11-10  8:17 Sascha Hauer
  0 siblings, 0 replies; only message in thread
From: Sascha Hauer @ 2025-11-10  8:17 UTC (permalink / raw)
  To: Barebox List

a dm_target is allocated in dm_parse_table(), thus must be freed in
dm_destroy(). The destroy op only frees everything related to the
dm_target, but not the dm_target itself.

Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
---
 drivers/block/dm/dm-core.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/drivers/block/dm/dm-core.c b/drivers/block/dm/dm-core.c
index 1bc3446cb0..fd7ed0d84e 100644
--- a/drivers/block/dm/dm-core.c
+++ b/drivers/block/dm/dm-core.c
@@ -428,6 +428,7 @@ static int dm_parse_table(struct dm_device *dm, const char *ctable)
 	list_for_each_entry_safe_reverse(ti, tmp, &dm->targets, list) {
 		ti->ops->destroy(ti);
 		list_del(&ti->list);
+		free(ti);
 	}
 
 	free(rowv);
@@ -439,12 +440,13 @@ static int dm_parse_table(struct dm_device *dm, const char *ctable)
 
 void dm_destroy(struct dm_device *dm)
 {
-	struct dm_target *ti;
+	struct dm_target *ti, *tmp;
 
 	blockdevice_unregister(&dm->blk);
 
-	list_for_each_entry_reverse(ti, &dm->targets, list) {
+	list_for_each_entry_safe_reverse(ti, tmp, &dm->targets, list) {
 		ti->ops->destroy(ti);
+		free(ti);
 	}
 
 	unregister_device(&dm->dev);
-- 
2.47.3




^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-11-10  8:18 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-11-10  8:17 [PATCH] dm: fix memory leak Sascha Hauer

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox