]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
ksmbd: Fix memory leak in get_file_all_info()
authorZilin Guan <zilin@seu.edu.cn>
Wed, 24 Dec 2025 14:20:16 +0000 (14:20 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 8 Jan 2026 09:16:51 +0000 (10:16 +0100)
[ Upstream commit 0c56693b06a68476ba113db6347e7897475f9e4c ]

In get_file_all_info(), if vfs_getattr() fails, the function returns
immediately without freeing the allocated filename, leading to a memory
leak.

Fix this by freeing the filename before returning in this error case.

Fixes: 5614c8c487f6a ("ksmbd: replace generic_fillattr with vfs_getattr")
Signed-off-by: Zilin Guan <zilin@seu.edu.cn>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/smb/server/smb2pdu.c

index 6a94cda0927d7db61ab8002a95c8ec68ec3538a3..2b59c282cda5959b9a12a37007e5d8ba22abb58e 100644 (file)
@@ -4933,8 +4933,10 @@ static int get_file_all_info(struct ksmbd_work *work,
 
        ret = vfs_getattr(&fp->filp->f_path, &stat, STATX_BASIC_STATS,
                          AT_STATX_SYNC_AS_STAT);
-       if (ret)
+       if (ret) {
+               kfree(filename);
                return ret;
+       }
 
        ksmbd_debug(SMB, "filename = %s\n", filename);
        delete_pending = ksmbd_inode_pending_delete(fp);