x86, efi: Only close open files in error path
authorMatt Fleming <matt.fleming@intel.com>
Thu, 15 Mar 2012 19:13:25 +0000 (19:13 +0000)
committerH. Peter Anvin <hpa@zytor.com>
Fri, 1 Jun 2012 16:11:10 +0000 (09:11 -0700)
The loop at the 'close_handles' label in handle_ramdisks() should be
using 'i', which represents the number of initrd files that were
successfully opened, not 'nr_initrds' which is the number of initrd=
arguments passed on the command line.

Currently, if we execute the loop to close all file handles and we
failed to open any initrds we'll try to call the close function on a
garbage pointer, causing the machine to hang.

Cc: Matthew Garrett <mjg@redhat.com>
Signed-off-by: Matt Fleming <matt.fleming@intel.com>
Link: http://lkml.kernel.org/r/1331907517-3985-2-git-send-email-matt@console-pimps.org
Signed-off-by: H. Peter Anvin <hpa@zytor.com>
arch/x86/boot/compressed/eboot.c

index 2c14e76bb4c71255ee9c1d9b29b171dd73a33d60..52a4e667b258ba93bad4e50a630310074349417a 100644 (file)
@@ -674,7 +674,7 @@ free_initrd_total:
        low_free(initrd_total, initrd_addr);
 
 close_handles:
-       for (k = j; k < nr_initrds; k++)
+       for (k = j; k < i; k++)
                efi_call_phys1(fh->close, initrds[k].handle);
 free_initrds:
        efi_call_phys1(sys_table->boottime->free_pool, initrds);