Re: [PATCH] wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup()
From: Jeff Johnson
Date: Fri Jul 31 2026 - 17:47:55 EST
On 7/27/2026 3:55 AM, Abdun Nihaal wrote:
> In ath11k_dp_srng_setup(), the memory allocated for
> ring->vaddr_unaligned is not freed when ath11k_hal_srng_setup() fails.
> Fix that by calling ath11k_dp_srng_cleanup() in that error path.
Did you find this on your own? Just want to make sure you are aware of:
https://docs.kernel.org/process/coding-assistants.html
FWIW my coding agent says this patch is correct but incomplete. There is a 2nd
leak, at the switch (type) default: case which returns -EINVAL without cleanup.
Care to incorporate a fix for that in a v2?
For that part you can add Assisted-by: Claude:claude-sonnet-4-6
/jeff
>
> Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
> ---
> Compile tested only. Issue found using static analysis.
>
> drivers/net/wireless/ath/ath11k/dp.c | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/drivers/net/wireless/ath/ath11k/dp.c b/drivers/net/wireless/ath/ath11k/dp.c
> index f389b97acbdd..c3a16da1cba7 100644
> --- a/drivers/net/wireless/ath/ath11k/dp.c
> +++ b/drivers/net/wireless/ath/ath11k/dp.c
> @@ -324,6 +324,7 @@ int ath11k_dp_srng_setup(struct ath11k_base *ab, struct dp_srng *ring,
>
> ret = ath11k_hal_srng_setup(ab, type, ring_num, mac_id, ¶ms);
> if (ret < 0) {
> + ath11k_dp_srng_cleanup(ab, ring);
> ath11k_warn(ab, "failed to setup srng: %d ring_id %d\n",
> ret, ring_num);
> return ret;