mt76: mt7663u: fix memory leak in set key
authorSean Wang <sean.wang@mediatek.com>
Tue, 7 Jul 2020 19:16:46 +0000 (03:16 +0800)
committerFelix Fietkau <nbd@nbd.name>
Tue, 21 Jul 2020 17:01:18 +0000 (19:01 +0200)
Fix memory leak in set key.

Fixes: eb99cc95c3b6 ("mt76: mt7615: introduce mt7663u support")
Signed-off-by: Sean Wang <sean.wang@mediatek.com>
Acked-by: Lorenzo Bianconi <lorenzo@kernel.org>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
drivers/net/wireless/mediatek/mt76/mt7615/usb.c

index feda5d0c171e56b80d7dea9837932b038143d263..1f1578895ed5856f74b5be8dc650d034052fb650 100644 (file)
@@ -167,12 +167,16 @@ __mt7663u_mac_set_key(struct mt7615_dev *dev,
 
        lockdep_assert_held(&dev->mt76.mutex);
 
-       if (!sta)
-               return -EINVAL;
+       if (!sta) {
+               err = -EINVAL;
+               goto out;
+       }
 
        cipher = mt7615_mac_get_cipher(key->cipher);
-       if (cipher == MT_CIPHER_NONE)
-               return -EOPNOTSUPP;
+       if (cipher == MT_CIPHER_NONE) {
+               err = -EOPNOTSUPP;
+               goto out;
+       }
 
        wcid = &wd->sta->wcid;
 
@@ -180,19 +184,22 @@ __mt7663u_mac_set_key(struct mt7615_dev *dev,
        err = mt7615_mac_wtbl_update_key(dev, wcid, key->key, key->keylen,
                                         cipher, key->cmd);
        if (err < 0)
-               return err;
+               goto out;
 
        err = mt7615_mac_wtbl_update_pk(dev, wcid, cipher, key->keyidx,
                                        key->cmd);
        if (err < 0)
-               return err;
+               goto out;
 
        if (key->cmd == SET_KEY)
                wcid->cipher |= BIT(cipher);
        else
                wcid->cipher &= ~BIT(cipher);
 
-       return 0;
+out:
+       kfree(key->key);
+
+       return err;
 }
 
 void mt7663u_wtbl_work(struct work_struct *work)