From: Colin Ian King colin.king@canonical.com
The -ENOTTY error return path does not free the allocated kdata as it returns directly. Fix this by returning via the error handling label err.
Addresses-Coverity: ("Resource leak") Fixes: c02a81fba74f ("dma-buf: Add dma-buf heaps framework") Signed-off-by: Colin Ian King colin.king@canonical.com --- drivers/dma-buf/dma-heap.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/dma-buf/dma-heap.c b/drivers/dma-buf/dma-heap.c index 4f04d104ae61..80f2f5eac1e4 100644 --- a/drivers/dma-buf/dma-heap.c +++ b/drivers/dma-buf/dma-heap.c @@ -157,7 +157,8 @@ static long dma_heap_ioctl(struct file *file, unsigned int ucmd, ret = dma_heap_ioctl_allocate(file, kdata); break; default: - return -ENOTTY; + ret = -ENOTTY; + goto err; }
if (copy_to_user((void __user *)arg, kdata, out_size) != 0)
On Mon, Dec 16, 2019 at 8:11 AM Colin King colin.king@canonical.com wrote:
From: Colin Ian King colin.king@canonical.com
The -ENOTTY error return path does not free the allocated kdata as it returns directly. Fix this by returning via the error handling label err.
Addresses-Coverity: ("Resource leak") Fixes: c02a81fba74f ("dma-buf: Add dma-buf heaps framework") Signed-off-by: Colin Ian King colin.king@canonical.com
Acked-by: John Stultz john.stultz@linaro.org
Thanks so much for submitting this!
Sumit, do you mind queueing this up for drm-misc-next?
thanks -john
linaro-mm-sig@lists.linaro.org