]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
mt76: mt7615: fix potential memory leak in mcu message handler
authorSean Wang <sean.wang@mediatek.com>
Tue, 7 Jul 2020 19:16:48 +0000 (03:16 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 19 Aug 2020 06:23:58 +0000 (08:23 +0200)
[ Upstream commit 9248c08c3fc4ef816c82aa49d01123f4746d349f ]

Fix potential memory leak in mcu message handler on error condition.

Fixes: 0e6a29e477f3 ("mt76: mt7615: add support to read temperature from mcu")
Acked-by: Lorenzo Bianconi <lorenzo@kernel.org>
Signed-off-by: Sean Wang <sean.wang@mediatek.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/mediatek/mt76/mt7615/mcu.c

index 29a7aaabb6da1e876e3f699caf28c93485b2b94f..9c55424962522547d570ad031515dbe3cb3205a7 100644 (file)
@@ -167,8 +167,10 @@ mt7615_mcu_parse_response(struct mt7615_dev *dev, int cmd,
        struct mt7615_mcu_rxd *rxd = (struct mt7615_mcu_rxd *)skb->data;
        int ret = 0;
 
-       if (seq != rxd->seq)
-               return -EAGAIN;
+       if (seq != rxd->seq) {
+               ret = -EAGAIN;
+               goto out;
+       }
 
        switch (cmd) {
        case MCU_CMD_PATCH_SEM_CONTROL:
@@ -182,6 +184,7 @@ mt7615_mcu_parse_response(struct mt7615_dev *dev, int cmd,
        default:
                break;
        }
+out:
        dev_kfree_skb(skb);
 
        return ret;