From 98a0e0adabd49256188d9d37d46c0118c4984b24 Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Sun, 29 Mar 2015 16:21:52 +0100 Subject: [PATCH] gadgetfs: Fix leak on error in aio_read() The previous fix, 'gadgetfs: use-after-free in ->aio_read()', missed one error path where the iovec needs to be freed. This fix is not needed upstream as that error path was removed by commit 7fe3976e0f3a ('gadget: switch ep_io_operations to ->read_iter/->write_iter'). Fixes: f01d35a15fa0 ('gadgetfs: use-after-free in ->aio_read()') Signed-off-by: Ben Hutchings --- drivers/usb/gadget/inode.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/usb/gadget/inode.c b/drivers/usb/gadget/inode.c index d00b3e3a6cfe..ce7253bfaa95 100644 --- a/drivers/usb/gadget/inode.c +++ b/drivers/usb/gadget/inode.c @@ -648,6 +648,7 @@ fail: value = get_ready_ep(iocb->ki_filp->f_flags, epdata); if (unlikely(value < 0)) { + kfree(priv->iv); kfree(priv); goto fail; } -- 2.39.2