> From: Jason Gunthorpe <[email protected]> > Sent: Thursday, September 18, 2025 4:02 AM > > If something holds a refcount then it is at risk of UAFing. For abort > paths we expect the caller to never share the object with a parallel > thread and to clean up any refcounts it obtained on its own. > > Add the missing dec inside iommufd_hwpt_paging_alloc()during error > unwind > by making iommufd_hw_pagetable_attach/detach() proper pairs. > > Signed-off-by: Jason Gunthorpe <[email protected]>
Reviewed-by: Kevin Tian <[email protected]>
