]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
NTB: ntb_transport: fix possible memory leak while device_register() fails
authorYang Yingliang <yangyingliang@huawei.com>
Thu, 10 Nov 2022 15:19:17 +0000 (23:19 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 11 Aug 2023 09:33:44 +0000 (11:33 +0200)
[ Upstream commit 8623ccbfc55d962e19a3537652803676ad7acb90 ]

If device_register() returns error, the name allocated by
dev_set_name() need be freed. As comment of device_register()
says, it should use put_device() to give up the reference in
the error path. So fix this by calling put_device(), then the
name can be freed in kobject_cleanup(), and client_dev is freed
in ntb_transport_client_release().

Fixes: fce8a7bb5b4b ("PCI-Express Non-Transparent Bridge Support")
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Reviewed-by: Dave Jiang <dave.jiang@intel.com>
Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/ntb/ntb_transport.c

index 18339b7e88a46292a294313f40f991afc47cb8eb..a58ced5d604335c65967edc5bf09919dd8783e22 100644 (file)
@@ -395,7 +395,7 @@ int ntb_transport_register_client_dev(char *device_name)
 
                rc = device_register(dev);
                if (rc) {
-                       kfree(client_dev);
+                       put_device(dev);
                        goto err;
                }