On 2/13/23 14:27, Warner Losh wrote:
+    int32_t *snamep = g_malloc(sizeof(int32_t) * namelen), *p, *q, i;

g_new(int32_t, namelen)

+    unlock_user(holdp, oldp, holdlen);
+    unlock_user(holdp, oldp, ret == 0 ? holdlen : 0);

double-unlock.  clearly the first line is extra.

Otherwise,
Reviewed-by: Richard Henderson <richard.hender...@linaro.org>


r~

Reply via email to