releases/5.1.3/virtio_ring-fix-potential-mem-leak-in-virtqueue_add_indirect_packed.patch

   1 From df0bfe7501e9319546ea380d39674a4179e059c3 Mon Sep 17 00:00:00 2001
   2 From: YueHaibing <yuehaibing@huawei.com>
   3 Date: Tue, 12 Mar 2019 15:06:53 +0800
   4 Subject: virtio_ring: Fix potential mem leak in virtqueue_add_indirect_packed
   5
   6 From: YueHaibing <yuehaibing@huawei.com>
   7
   8 commit df0bfe7501e9319546ea380d39674a4179e059c3 upstream.
   9
  10 'desc' should be freed before leaving from err handing path.
  11
  12 Fixes: 1ce9e6055fa0 ("virtio_ring: introduce packed ring support")
  13 Signed-off-by: YueHaibing <yuehaibing@huawei.com>
  14 Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
  15 Acked-by: Jason Wang <jasowang@redhat.com>
  16 stable@vger.kernel.org
  17 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
  18
  19 ---
  20  drivers/virtio/virtio_ring.c |    1 +
  21  1 file changed, 1 insertion(+)
  22
  23 --- a/drivers/virtio/virtio_ring.c
  24 +++ b/drivers/virtio/virtio_ring.c
  25 @@ -1004,6 +1004,7 @@ static int virtqueue_add_indirect_packed
  26
  27         if (unlikely(vq->vq.num_free < 1)) {
  28                 pr_debug("Can't add buf len 1 - avail = 0\n");
  29 +               kfree(desc);
  30                 END_USE(vq);
  31                 return -ENOSPC;
  32         }