Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb

[ Upstream commit d33fe77bdf75806d785dabf90d21d962122e5296 ]

When kmalloc() on buf fails, urb should be freed just like
when kmalloc() on dr fails.

Signed-off-by: Dinghao Liu <dinghao.liu@zju.edu.cn>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

diff --git a/drivers/bluetooth/btusb.c b/drivers/bluetooth/btusb.c
index a5fef9aa419fd1758d08074f6487082e0948a141..91a0c84d55c97b2f93acff6ce8df44b16991fe5b 100644 (file)
--- a/drivers/bluetooth/btusb.c
+++ b/drivers/bluetooth/btusb.c
@@ -2849,6 +2849,7 @@ static int btusb_mtk_submit_wmt_recv_urb(struct hci_dev *hdev)
        buf = kmalloc(size, GFP_KERNEL);
        if (!buf) {
                kfree(dr);
+               usb_free_urb(urb);
                return -ENOMEM;
        }