From: Yunjian Wang Date: Tue, 7 Jun 2022 06:50:57 +0000 (+0800) Subject: net/tap: fix device freeing X-Git-Url: http://git.droids-corp.org/?a=commitdiff_plain;h=f2aebfc4e941b315cebb71d6408dd5bbb0570a96;p=dpdk.git net/tap: fix device freeing The error path was calling rte_eth_dev_release_port() function, which frees eth_dev->data->dev_private, and then tries to free pmd->intr_handle, which causes the use after free issue. The free can be moved to before the release function is called. Fixes: d61138d4f0e ("drivers: remove direct access to interrupt handle") Cc: stable@dpdk.org Signed-off-by: Xiangjun Meng Signed-off-by: Yunjian Wang Reviewed-by: Andrew Rybchenko --- diff --git a/drivers/net/tap/rte_eth_tap.c b/drivers/net/tap/rte_eth_tap.c index 5495818be6..9e1032fe72 100644 --- a/drivers/net/tap/rte_eth_tap.c +++ b/drivers/net/tap/rte_eth_tap.c @@ -2179,8 +2179,8 @@ error_exit: close(pmd->ioctl_sock); /* mac_addrs must not be freed alone because part of dev_private */ dev->data->mac_addrs = NULL; - rte_eth_dev_release_port(dev); rte_intr_instance_free(pmd->intr_handle); + rte_eth_dev_release_port(dev); error_exit_nodev: TAP_LOG(ERR, "%s Unable to initialize %s",