brcmfmac: fix skb leak in brcmf_sdio_txpkt_prep_sg error path.
Commit 1eb4301867
(brcmfmac: fix txglomming scatter-gather packet transfers)
added an allocation of an skb via brcmu_pkt_buf_get_skb() but forgot to
free it on one of the error paths.
Acked-by: Arend van Spriel <arend@broadcom.com>
Signed-off-by: Dave Jones<davej@fedoraproject.org>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
This commit is contained in:
parent
d51246481c
commit
2dc3a8e0b6
@ -1948,8 +1948,10 @@ static int brcmf_sdio_txpkt_prep_sg(struct brcmf_sdio *bus,
|
|||||||
if (pkt_pad == NULL)
|
if (pkt_pad == NULL)
|
||||||
return -ENOMEM;
|
return -ENOMEM;
|
||||||
ret = brcmf_sdio_txpkt_hdalign(bus, pkt_pad);
|
ret = brcmf_sdio_txpkt_hdalign(bus, pkt_pad);
|
||||||
if (unlikely(ret < 0))
|
if (unlikely(ret < 0)) {
|
||||||
|
kfree_skb(pkt_pad);
|
||||||
return ret;
|
return ret;
|
||||||
|
}
|
||||||
memcpy(pkt_pad->data,
|
memcpy(pkt_pad->data,
|
||||||
pkt->data + pkt->len - tail_chop,
|
pkt->data + pkt->len - tail_chop,
|
||||||
tail_chop);
|
tail_chop);
|
||||||
|
Loading…
Reference in New Issue
Block a user