staging : rtl8712: Free memory when kmalloc fails
authorSouptick Joarder <jrdr.linux@gmail.com>
Mon, 31 Oct 2016 11:26:05 +0000 (16:56 +0530)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 7 Nov 2016 10:24:52 +0000 (11:24 +0100)
There are few functions where we need to free previously allocated
memory when kmalloc fails. Else it may lead to memory leakage. In
_init_cmd_priv() and _r8712_init_xmit_priv(), in few places we are
not freeing previously allocated memory when kmalloc fails.

Signed-off-by: Souptick joarder <jrdr.linux@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8712/rtl871x_cmd.c
drivers/staging/rtl8712/rtl871x_xmit.c

index b7ee5e63af33ac20870b4b2bc93b2bacd0df0809..04638f1e4e881da9b6105977367b70ee2a3cef52 100644 (file)
@@ -72,8 +72,11 @@ static sint _init_cmd_priv(struct cmd_priv *pcmdpriv)
                            ((addr_t)(pcmdpriv->cmd_allocated_buf) &
                            (CMDBUFF_ALIGN_SZ - 1));
        pcmdpriv->rsp_allocated_buf = kmalloc(MAX_RSPSZ + 4, GFP_ATOMIC);
-       if (!pcmdpriv->rsp_allocated_buf)
+       if (!pcmdpriv->rsp_allocated_buf) {
+               kfree(pcmdpriv->cmd_allocated_buf);
+               pcmdpriv->cmd_allocated_buf = NULL;
                return _FAIL;
+       }
        pcmdpriv->rsp_buf = pcmdpriv->rsp_allocated_buf  +  4 -
                            ((addr_t)(pcmdpriv->rsp_allocated_buf) & 3);
        pcmdpriv->cmd_issued_cnt = 0;
index be38364c8a7c6684139e24fe287ac215a8133b01..484d2f2d2449ba5a1df4e1c0c29f6420432a0416 100644 (file)
@@ -128,8 +128,11 @@ sint _r8712_init_xmit_priv(struct xmit_priv *pxmitpriv,
        _init_queue(&pxmitpriv->pending_xmitbuf_queue);
        pxmitpriv->pallocated_xmitbuf = kmalloc(NR_XMITBUFF * sizeof(struct xmit_buf) + 4,
                                                GFP_ATOMIC);
-       if (!pxmitpriv->pallocated_xmitbuf)
+       if (!pxmitpriv->pallocated_xmitbuf) {
+               kfree(pxmitpriv->pallocated_frame_buf);
+               pxmitpriv->pallocated_frame_buf = NULL;
                return _FAIL;
+       }
        pxmitpriv->pxmitbuf = pxmitpriv->pallocated_xmitbuf + 4 -
                              ((addr_t)(pxmitpriv->pallocated_xmitbuf) & 3);
        pxmitbuf = (struct xmit_buf *)pxmitpriv->pxmitbuf;