mISDN: fix possible memory leak in mISDN_dsp_element_register()
authorYang Yingliang <yangyingliang@huawei.com>
Wed, 9 Nov 2022 13:28:32 +0000 (21:28 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 26 Nov 2022 08:24:38 +0000 (09:24 +0100)
[ Upstream commit 98a2ac1ca8fd6eca6867726fe238d06e75eb1acd ]

Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's
bus_id string array"), the name of device is allocated dynamically,
use put_device() to give up the reference, so that the name can be
freed in kobject_cleanup() when the refcount is 0.

The 'entry' is going to be freed in mISDN_dsp_dev_release(), so the
kfree() is removed. list_del() is called in mISDN_dsp_dev_release(),
so it need be initialized.

Fixes: 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array")
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Link: https://lore.kernel.org/r/20221109132832.3270119-1-yangyingliang@huawei.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/isdn/mISDN/dsp_pipeline.c

index c3b2c99..cfbcd9e 100644 (file)
@@ -77,6 +77,7 @@ int mISDN_dsp_element_register(struct mISDN_dsp_element *elem)
        if (!entry)
                return -ENOMEM;
 
+       INIT_LIST_HEAD(&entry->list);
        entry->elem = elem;
 
        entry->dev.class = elements_class;
@@ -107,7 +108,7 @@ err2:
        device_unregister(&entry->dev);
        return ret;
 err1:
-       kfree(entry);
+       put_device(&entry->dev);
        return ret;
 }
 EXPORT_SYMBOL(mISDN_dsp_element_register);