cifs: fix wrong release in sess_alloc_buffer() failed path
authorDing Hui <dinghui@sangfor.com.cn>
Tue, 17 Aug 2021 14:55:10 +0000 (22:55 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 18 Sep 2021 11:40:32 +0000 (13:40 +0200)
[ Upstream commit d72c74197b70bc3c95152f351a568007bffa3e11 ]

smb_buf is allocated by small_smb_init_no_tc(), and buf type is
CIFS_SMALL_BUFFER, so we should use cifs_small_buf_release() to
release it in failed path.

Signed-off-by: Ding Hui <dinghui@sangfor.com.cn>
Reviewed-by: Paulo Alcantara (SUSE) <pc@cjr.nz>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/cifs/sess.c

index 1a0298d1e7cdadb8d064a630fbe4743896c6cc5c..d58c5ffeca0d97e51ac3611a354f913524613e67 100644 (file)
@@ -888,7 +888,7 @@ sess_alloc_buffer(struct sess_data *sess_data, int wct)
        return 0;
 
 out_free_smb_buf:
-       kfree(smb_buf);
+       cifs_small_buf_release(smb_buf);
        sess_data->iov[0].iov_base = NULL;
        sess_data->iov[0].iov_len = 0;
        sess_data->buf0_type = CIFS_NO_BUFFER;