xen/xenbus: Fix a double free in xenbus_map_ring_pv()
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 10 Jul 2020 11:36:10 +0000 (14:36 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 22 Jul 2020 07:34:04 +0000 (09:34 +0200)
commit7b7e1099e002523ad72a5241795a6de71915382f
tree097ea44e519712d6467f8bec5cfa24bb20c10f93
parent5077daec9578714d954cf2db4d10b5e0e919b366
xen/xenbus: Fix a double free in xenbus_map_ring_pv()

[ Upstream commit ba8c423488974f02b538e9dc1730f0334f9b85aa ]

When there is an error the caller frees "info->node" so the free here
will result in a double free.  We should just delete first kfree().

Fixes: 3848e4e0a32a ("xen/xenbus: avoid large structs and arrays on the stack")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20200710113610.GA92345@mwanda
Reviewed-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/xen/xenbus/xenbus_client.c