virtio: fix memory leak in virtqueue_add()
commit 58625edf9e2515ed41dac2a24fa8004030a87b87 upstream. When using the indirect buffers feature, 'desc' is allocated in virtqueue_add() but isn't freed before leaving on a ring full error, causing a memory leak. For example, it seems rather clear that this can trigger with virtio net if mergeable buffers are not used. Signed-off-by: Wei Yongjun <weiyj.lk@gmail.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
9dddd02de0
commit
fa54eea35b
@ -202,6 +202,8 @@ static inline int virtqueue_add(struct virtqueue *_vq,
|
||||
* host should service the ring ASAP. */
|
||||
if (out_sgs)
|
||||
vq->notify(&vq->vq);
|
||||
if (indirect)
|
||||
kfree(desc);
|
||||
END_USE(vq);
|
||||
return -ENOSPC;
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user