Skip to contentSkip to conversation

cpufreq: ti-cpufreq: kfree opp_data when failure

PATCH New Zumeng Chen 2 participants 7 messages Sep 27, 2017 – Oct 9, 2017 CPU frequency scaling framework

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 cpufreq: ti-cpufreq: kfree opp_data when failure

From: Zumeng Chen <[email protected]>

memory leakage was found by kmemleak. opp_data needs to be freed when failure, including fail_put_node.

unreferenced object 0xccdd4c40 (size 64):
comm "swapper", pid 1, jiffies 4294938465 (age 888.520s) hex dump (first 32 bytes):

    00 7c 00 c1 98 69 d8 ce 00 24 03 ce 00 24 03 ce  .|...i...$...$..
    20 35 23 c1 00 00 00 00 00 00 00 00 00 00 00 00   5#.............
  backtrace:
    [<c028fb64>] kmem_cache_alloc_trace+0x2c4/0x3cc
    [<c076d5f0>] ti_cpufreq_probe+0x6c/0x334
    [<c068d6e4>] platform_drv_probe+0x60/0xc0
    [<c068b384>] driver_probe_device+0x218/0x2c4
    [<c068b5a4>] __device_attach_driver+0xa8/0xdc
    [<c0689340>] bus_for_each_drv+0x70/0xa4
    [<c068b020>] __device_attach+0xc0/0x124
    [<c068b634>] device_initial_probe+0x1c/0x20
    [<c068a3b8>] bus_probe_device+0x94/0x9c
    [<c0688300>] device_add+0x404/0x590
    [<c068d408>] platform_device_add+0x11c/0x230
    [<c068df40>] platform_device_register_full+0x10c/0x128
    [<c076d578>] ti_cpufreq_init+0x44/0x50
    [<c01017c4>] do_one_initcall+0x54/0x180
    [<c0e00fe0>] kernel_init_freeable+0x270/0x33c
    [<c093f2bc>] kernel_init+0x18/0x124
---
 drivers/cpufreq/ti-cpufreq.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)
drivers/cpufreq/ti-cpufreq.c +4 -1
index 4bf47de..ffcddcd 100644
@@ -217,7 +217,8 @@ static int ti_cpufreq_init(void)
 	opp_data->cpu_dev = get_cpu_device(0);
 	if (!opp_data->cpu_dev) {
 		pr_err("%s: Failed to get device for CPU0\n", __func__);
-		return -ENODEV;
+		ret = ENODEV;
+		goto free_opp_data;
 	}
 
 	opp_data->opp_node = dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);
@@ -262,6 +263,8 @@ static int ti_cpufreq_init(void)
 
 fail_put_node:
 	of_node_put(opp_data->opp_node);
+free_opp_data:
+	kfree(opp_data);
 
 	return ret;
 }
Signature · 1 line
2.7.4
maintainer
#1 lore raw

PATCH 1/1 cpufreq: ti-cpufreq: kfree opp_data when failure

Quoted 48 lines · Zumeng Chen

From: Zumeng Chen <[email protected]>

memory leakage was found by kmemleak. opp_data needs to be freed when failure, including fail_put_node.

unreferenced object 0xccdd4c40 (size 64):
comm "swapper", pid 1, jiffies 4294938465 (age 888.520s) hex dump (first 32 bytes):

    00 7c 00 c1 98 69 d8 ce 00 24 03 ce 00 24 03 ce  .|...i...$...$..
    20 35 23 c1 00 00 00 00 00 00 00 00 00 00 00 00   5#.............
  backtrace:
    [<c028fb64>] kmem_cache_alloc_trace+0x2c4/0x3cc
    [<c076d5f0>] ti_cpufreq_probe+0x6c/0x334
    [<c068d6e4>] platform_drv_probe+0x60/0xc0
    [<c068b384>] driver_probe_device+0x218/0x2c4
    [<c068b5a4>] __device_attach_driver+0xa8/0xdc
    [<c0689340>] bus_for_each_drv+0x70/0xa4
    [<c068b020>] __device_attach+0xc0/0x124
    [<c068b634>] device_initial_probe+0x1c/0x20
    [<c068a3b8>] bus_probe_device+0x94/0x9c
    [<c0688300>] device_add+0x404/0x590
    [<c068d408>] platform_device_add+0x11c/0x230
    [<c068df40>] platform_device_register_full+0x10c/0x128
    [<c076d578>] ti_cpufreq_init+0x44/0x50
    [<c01017c4>] do_one_initcall+0x54/0x180
    [<c0e00fe0>] kernel_init_freeable+0x270/0x33c
    [<c093f2bc>] kernel_init+0x18/0x124
---
 drivers/cpufreq/ti-cpufreq.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)
drivers/cpufreq/ti-cpufreq.c +2 -1
index 4bf47de..ffcddcd 100644
@@ -217,7 +217,8 @@ static int ti_cpufreq_init(void)
 	opp_data->cpu_dev = get_cpu_device(0);
 	if (!opp_data->cpu_dev) {
 		pr_err("%s: Failed to get device for CPU0\n", __func__);
-		return -ENODEV;
+		ret = ENODEV;
+		goto free_opp_data;
 	}
 
 	opp_data->opp_node = dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);

drivers/cpufreq/ti-cpufreq.c static int ti_cpufreq_init(void) · line 270

Quoted 8 lines
drivers/cpufreq/ti-cpufreq.c +2 -0
@@ -262,6 +263,8 @@ static int ti_cpufreq_init(void)
 
 fail_put_node:
 	of_node_put(opp_data->opp_node);
+free_opp_data:
+	kfree(opp_data);
 
 	return ret;
 }

I also see that you are missing an of_node_put(np) in the driver. Maybe you want to fix that as well (in a separate patch) ?

Signature · 1 line
viresh
#2 lore raw

PATCH 1/1 cpufreq: ti-cpufreq: kfree opp_data when failure

Quoted 55 lines · Viresh Kumar
Quoted 54 lines · Zumeng Chen

From: Zumeng Chen <[email protected]>

memory leakage was found by kmemleak. opp_data needs to be freed when failure, including fail_put_node.

unreferenced object 0xccdd4c40 (size 64):

   comm "swapper", pid 1, jiffies 4294938465 (age 888.520s)
   hex dump (first 32 bytes):
     00 7c 00 c1 98 69 d8 ce 00 24 03 ce 00 24 03 ce  .|...i...$...$..
     20 35 23 c1 00 00 00 00 00 00 00 00 00 00 00 00   5#.............
   backtrace:
     [<c028fb64>] kmem_cache_alloc_trace+0x2c4/0x3cc
     [<c076d5f0>] ti_cpufreq_probe+0x6c/0x334
     [<c068d6e4>] platform_drv_probe+0x60/0xc0
     [<c068b384>] driver_probe_device+0x218/0x2c4
     [<c068b5a4>] __device_attach_driver+0xa8/0xdc
     [<c0689340>] bus_for_each_drv+0x70/0xa4
     [<c068b020>] __device_attach+0xc0/0x124
     [<c068b634>] device_initial_probe+0x1c/0x20
     [<c068a3b8>] bus_probe_device+0x94/0x9c
     [<c0688300>] device_add+0x404/0x590
     [<c068d408>] platform_device_add+0x11c/0x230
     [<c068df40>] platform_device_register_full+0x10c/0x128
     [<c076d578>] ti_cpufreq_init+0x44/0x50
     [<c01017c4>] do_one_initcall+0x54/0x180
     [<c0e00fe0>] kernel_init_freeable+0x270/0x33c
     [<c093f2bc>] kernel_init+0x18/0x124
---
  drivers/cpufreq/ti-cpufreq.c | 5 ++++-
  1 file changed, 4 insertions(+), 1 deletion(-)
drivers/cpufreq/ti-cpufreq.c +4 -1
index 4bf47de..ffcddcd 100644
@@ -217,7 +217,8 @@ static int ti_cpufreq_init(void)
  	opp_data->cpu_dev = get_cpu_device(0);
  	if (!opp_data->cpu_dev) {
  		pr_err("%s: Failed to get device for CPU0\n", __func__);
-		return -ENODEV;
+		ret = ENODEV;
+		goto free_opp_data;
  	}
 
  	opp_data->opp_node = dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);
@@ -262,6 +263,8 @@ static int ti_cpufreq_init(void)
 
  fail_put_node:
  	of_node_put(opp_data->opp_node);
+free_opp_data:
+	kfree(opp_data);
 
Quoted 6 lines

drivers/cpufreq/ti-cpufreq.c static int ti_cpufreq_init(void) · line 270

Quoted 2 lines
drivers/cpufreq/ti-cpufreq.c +0 -0
  	return ret;
  }

I also see that you are missing an of_node_put(np) in the driver. Maybe you want to fix that as well (in a separate patch) ?

Ha, thanks, I'm not sure if I follow your meanings.

opp_data->opp_node will be set after goto free_opp_data, so are we safe here?

         opp_data->cpu_dev = get_cpu_device(0);
         if (!opp_data->cpu_dev) {
                 pr_err("%s: Failed to get device for CPU0\n", __func__);
                 ret = ENODEV;
                 goto free_opp_data;
         }

         opp_data->opp_node = 

dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);

Cheers,
Zumeng

Quoted 1 line
maintainer
#3 lore raw

PATCH 1/1 cpufreq: ti-cpufreq: kfree opp_data when failure

Quoted 73 lines · Zumeng Chen
Quoted 56 lines · Viresh Kumar
Quoted 47 lines · Zumeng Chen

From: Zumeng Chen <[email protected]>

memory leakage was found by kmemleak. opp_data needs to be freed when failure, including fail_put_node.

unreferenced object 0xccdd4c40 (size 64):
comm "swapper", pid 1, jiffies 4294938465 (age 888.520s) hex dump (first 32 bytes):

    00 7c 00 c1 98 69 d8 ce 00 24 03 ce 00 24 03 ce  .|...i...$...$..
    20 35 23 c1 00 00 00 00 00 00 00 00 00 00 00 00   5#.............
  backtrace:
    [<c028fb64>] kmem_cache_alloc_trace+0x2c4/0x3cc
    [<c076d5f0>] ti_cpufreq_probe+0x6c/0x334
    [<c068d6e4>] platform_drv_probe+0x60/0xc0
    [<c068b384>] driver_probe_device+0x218/0x2c4
    [<c068b5a4>] __device_attach_driver+0xa8/0xdc
    [<c0689340>] bus_for_each_drv+0x70/0xa4
    [<c068b020>] __device_attach+0xc0/0x124
    [<c068b634>] device_initial_probe+0x1c/0x20
    [<c068a3b8>] bus_probe_device+0x94/0x9c
    [<c0688300>] device_add+0x404/0x590
    [<c068d408>] platform_device_add+0x11c/0x230
    [<c068df40>] platform_device_register_full+0x10c/0x128
    [<c076d578>] ti_cpufreq_init+0x44/0x50
    [<c01017c4>] do_one_initcall+0x54/0x180
    [<c0e00fe0>] kernel_init_freeable+0x270/0x33c
    [<c093f2bc>] kernel_init+0x18/0x124
---
 drivers/cpufreq/ti-cpufreq.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)
drivers/cpufreq/ti-cpufreq.c +2 -1
index 4bf47de..ffcddcd 100644
@@ -217,7 +217,8 @@ static int ti_cpufreq_init(void)
 	opp_data->cpu_dev = get_cpu_device(0);
 	if (!opp_data->cpu_dev) {
 		pr_err("%s: Failed to get device for CPU0\n", __func__);
-		return -ENODEV;
+		ret = ENODEV;
+		goto free_opp_data;
 	}
 	opp_data->opp_node = dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);

drivers/cpufreq/ti-cpufreq.c static int ti_cpufreq_init(void) · line 268

Quoted 6 lines
drivers/cpufreq/ti-cpufreq.c +2 -0
@@ -262,6 +263,8 @@ static int ti_cpufreq_init(void)
 fail_put_node:
 	of_node_put(opp_data->opp_node);
+free_opp_data:
+	kfree(opp_data);
 	return ret;
 }
Quoted 2 lines

I also see that you are missing an of_node_put(np) in the driver. Maybe you want to fix that as well (in a separate patch) ?

Ha, thanks, I'm not sure if I follow your meanings.

opp_data->opp_node will be set after goto free_opp_data, so are we safe here?

        opp_data->cpu_dev = get_cpu_device(0);
        if (!opp_data->cpu_dev) {
                pr_err("%s: Failed to get device for CPU0\n", __func__);
                ret = ENODEV;
                goto free_opp_data;
        }

        opp_data->opp_node =
Quoted 1 line

dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);

I was talking about this one.

        np = of_find_node_by_path("/");

There is no counterpart of this one.

Signature · 1 line
viresh
#4 lore raw

PATCH 1/1 cpufreq: ti-cpufreq: kfree opp_data when failure

Quoted 72 lines · Viresh Kumar
Quoted 71 lines · Zumeng Chen
Quoted 56 lines · Viresh Kumar
Quoted 47 lines · Zumeng Chen

From: Zumeng Chen <[email protected]>

memory leakage was found by kmemleak. opp_data needs to be freed when failure, including fail_put_node.

unreferenced object 0xccdd4c40 (size 64):

   comm "swapper", pid 1, jiffies 4294938465 (age 888.520s)
   hex dump (first 32 bytes):
     00 7c 00 c1 98 69 d8 ce 00 24 03 ce 00 24 03 ce  .|...i...$...$..
     20 35 23 c1 00 00 00 00 00 00 00 00 00 00 00 00   5#.............
   backtrace:
     [<c028fb64>] kmem_cache_alloc_trace+0x2c4/0x3cc
     [<c076d5f0>] ti_cpufreq_probe+0x6c/0x334
     [<c068d6e4>] platform_drv_probe+0x60/0xc0
     [<c068b384>] driver_probe_device+0x218/0x2c4
     [<c068b5a4>] __device_attach_driver+0xa8/0xdc
     [<c0689340>] bus_for_each_drv+0x70/0xa4
     [<c068b020>] __device_attach+0xc0/0x124
     [<c068b634>] device_initial_probe+0x1c/0x20
     [<c068a3b8>] bus_probe_device+0x94/0x9c
     [<c0688300>] device_add+0x404/0x590
     [<c068d408>] platform_device_add+0x11c/0x230
     [<c068df40>] platform_device_register_full+0x10c/0x128
     [<c076d578>] ti_cpufreq_init+0x44/0x50
     [<c01017c4>] do_one_initcall+0x54/0x180
     [<c0e00fe0>] kernel_init_freeable+0x270/0x33c
     [<c093f2bc>] kernel_init+0x18/0x124
---
  drivers/cpufreq/ti-cpufreq.c | 5 ++++-
  1 file changed, 4 insertions(+), 1 deletion(-)
drivers/cpufreq/ti-cpufreq.c +2 -1
index 4bf47de..ffcddcd 100644
@@ -217,7 +217,8 @@ static int ti_cpufreq_init(void)
  	opp_data->cpu_dev = get_cpu_device(0);
  	if (!opp_data->cpu_dev) {
  		pr_err("%s: Failed to get device for CPU0\n", __func__);
-		return -ENODEV;
+		ret = ENODEV;
+		goto free_opp_data;
  	}
  	opp_data->opp_node = dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);

drivers/cpufreq/ti-cpufreq.c static int ti_cpufreq_init(void) · line 268

Quoted 6 lines
drivers/cpufreq/ti-cpufreq.c +2 -0
@@ -262,6 +263,8 @@ static int ti_cpufreq_init(void)
  fail_put_node:
  	of_node_put(opp_data->opp_node);
+free_opp_data:
+	kfree(opp_data);
  	return ret;
  }
Quoted 2 lines

I also see that you are missing an of_node_put(np) in the driver. Maybe you want to fix that as well (in a separate patch) ?

Ha, thanks, I'm not sure if I follow your meanings.

opp_data->opp_node will be set after goto free_opp_data, so are we safe here?

         opp_data->cpu_dev = get_cpu_device(0);
         if (!opp_data->cpu_dev) {
                 pr_err("%s: Failed to get device for CPU0\n", __func__);
                 ret = ENODEV;
                 goto free_opp_data;
         }
Quoted 7 lines
Quoted 2 lines
         opp_data->opp_node =

dev_pm_opp_of_get_opp_desc_node(opp_data->cpu_dev);

I was talking about this one.

         np = of_find_node_by_path("/");

There is no counterpart of this one.

Yes, you are right, it seems of_node_put(np) that you mentioned were ignored by both paths. If you don't mind I can deliver a separate patch to fix this based on some testing later.

Cheers,
Zumeng

Quoted 1 line
maintainer
#5 lore raw

PATCH 1/1 cpufreq: ti-cpufreq: kfree opp_data when failure

Quoted 3 lines · Zumeng Chen

Yes, you are right, it seems of_node_put(np) that you mentioned were ignored by both paths. If you don't mind I can deliver a separate patch to fix this based on some testing later.

Yeah, that's exactly how I want it.

Signature · 1 line
viresh
#6 lore raw

PATCH 1/1 cpufreq: ti-cpufreq: kfree opp_data when failure

Quoted 6 lines · Viresh Kumar
Quoted 3 lines · Zumeng Chen

Yes, you are right, it seems of_node_put(np) that you mentioned were ignored by both paths. If you don't mind I can deliver a separate patch to fix this based on some testing later.

Yeah, that's exactly how I want it.

OK, I'll do it when I'm back from vacation, thanks ~