Revision 841adfca9c5fc0fec6b1f0b2e5eb7a3b239a7730 authored by Ralph Campbell on 29 June 2007, 18:37:56 UTC, committed by Roland Dreier on 03 July 2007, 03:48:31 UTC
If a page can't be allocated for the frag list of a skb, the code to unmap the partially allocated list is off by one. For exaple, if 'frags' equals one, i == 0, and the alloc_page() fails, then the old loop would have unmapped mapping[1] which is uninitialized. The same would happen if the call to ib_dma_map_page() failed. Signed-off-by: Ralph Campbell <ralph.campbell@qlogic.com> Acked-by: Michael S. Tsirkin <mst@dev.mellanox.co.il> Signed-off-by: Roland Dreier <rolandd@cisco.com>
1 parent 786f238
