a dm_target is allocated in dm_parse_table(), thus must be freed in dm_destroy(). The destroy op only frees everything related to the dm_target, but not the dm_target itself.
Signed-off-by: Sascha Hauer <[email protected]> --- drivers/block/dm/dm-core.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/block/dm/dm-core.c b/drivers/block/dm/dm-core.c index 1bc3446cb0..fd7ed0d84e 100644 --- a/drivers/block/dm/dm-core.c +++ b/drivers/block/dm/dm-core.c @@ -428,6 +428,7 @@ static int dm_parse_table(struct dm_device *dm, const char *ctable) list_for_each_entry_safe_reverse(ti, tmp, &dm->targets, list) { ti->ops->destroy(ti); list_del(&ti->list); + free(ti); } free(rowv); @@ -439,12 +440,13 @@ static int dm_parse_table(struct dm_device *dm, const char *ctable) void dm_destroy(struct dm_device *dm) { - struct dm_target *ti; + struct dm_target *ti, *tmp; blockdevice_unregister(&dm->blk); - list_for_each_entry_reverse(ti, &dm->targets, list) { + list_for_each_entry_safe_reverse(ti, tmp, &dm->targets, list) { ti->ops->destroy(ti); + free(ti); } unregister_device(&dm->dev); -- 2.47.3
