usb: gadget: f_uvc: fix potential memory leak
authorAndrzej Pietrasiewicz <andrzej.p@samsung.com>
Thu, 21 Aug 2014 14:54:45 +0000 (16:54 +0200)
committerFelipe Balbi <balbi@ti.com>
Thu, 21 Aug 2014 15:03:41 +0000 (10:03 -0500)
If uvc->control_buf is successfuly allocated but uvc->control_req
is not, uvc->control_buf is not freed in the error recovery path.
With this patch applied uvc->control_buf is freed unconditionally;
if it happens to be NULL kfree on it is safe anyway.

Signed-off-by: Andrzej Pietrasiewicz <andrzej.p@samsung.com>
Acked-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Felipe Balbi <balbi@ti.com>
drivers/usb/gadget/function/f_uvc.c

index e2a1f50bd93c4b7740c6592d5446c965ec107b04..ff4340a1b4b3f17d7168eccfeb535f5aefac5a4e 100644 (file)
@@ -720,10 +720,9 @@ error:
        if (uvc->video.ep)
                uvc->video.ep->driver_data = NULL;
 
-       if (uvc->control_req) {
+       if (uvc->control_req)
                usb_ep_free_request(cdev->gadget->ep0, uvc->control_req);
-               kfree(uvc->control_buf);
-       }
+       kfree(uvc->control_buf);
 
        usb_free_all_descriptors(f);
        return ret;