ACPI / utils: Fix memory leak in acpi_evaluate_reference() error path

When package.count is larger than ACPI_MAX_HANDLES, buffer.pointer is
not freed before the function returns AE_NO_MEMORY. Fix this possible
memory leak by kfree'ing it.

Signed-off-by: Xiongfeng Wang <wangxiongfeng2@huawei.com>
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>

diff --git a/drivers/acpi/utils.c b/drivers/acpi/utils.c
index 0a9e5979aaa9af8e4781a19d3ef18e0029ecdc1b..9d49a1acebe39a318cdfd18fe6502e4c97d816c5 100644 (file)
--- a/drivers/acpi/utils.c
+++ b/drivers/acpi/utils.c
@@ -355,6 +355,7 @@ acpi_evaluate_reference(acpi_handle handle,
        }
 
        if (package->package.count > ACPI_MAX_HANDLES) {
+               kfree(package);
                return AE_NO_MEMORY;
        }
        list->count = package->package.count;