diff options
| author | Fan Guo <guofan5@huawei.com> | 2020-06-12 14:38:24 +0800 |
|---|---|---|
| committer | Sasha Levin <sashal@kernel.org> | 2020-06-30 23:17:11 -0400 |
| commit | d6d76e02802865ac710145f7b9f2ae6c0aa0415c (patch) | |
| tree | fa576749b965e9a2eaa6ff15bf11999d42b03767 /drivers/infiniband/core | |
| parent | df5888912859c26b9d7cb825eb26920f5e0f9c67 (diff) | |
| download | linux-d6d76e02802865ac710145f7b9f2ae6c0aa0415c.tar.gz linux-d6d76e02802865ac710145f7b9f2ae6c0aa0415c.tar.bz2 linux-d6d76e02802865ac710145f7b9f2ae6c0aa0415c.zip | |
RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
[ Upstream commit a17f4bed811c60712d8131883cdba11a105d0161 ]
If ib_dma_mapping_error() returns non-zero value,
ib_mad_post_receive_mads() will jump out of loops and return -ENOMEM
without freeing mad_priv. Fix this memory-leak problem by freeing mad_priv
in this case.
Fixes: 2c34e68f4261 ("IB/mad: Check and handle potential DMA mapping errors")
Link: https://lore.kernel.org/r/20200612063824.180611-1-guofan5@huawei.com
Signed-off-by: Fan Guo <guofan5@huawei.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'drivers/infiniband/core')
| -rw-r--r-- | drivers/infiniband/core/mad.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/infiniband/core/mad.c b/drivers/infiniband/core/mad.c index cd82134d517b..a36b3b4f5c0a 100644 --- a/drivers/infiniband/core/mad.c +++ b/drivers/infiniband/core/mad.c @@ -2920,6 +2920,7 @@ static int ib_mad_post_receive_mads(struct ib_mad_qp_info *qp_info, DMA_FROM_DEVICE); if (unlikely(ib_dma_mapping_error(qp_info->port_priv->device, sg_list.addr))) { + kfree(mad_priv); ret = -ENOMEM; break; } |