OSDN Git Service

media: uvcvideo: Fix memory leak of object map on error exit path
authorColin Ian King <colin.king@canonical.com>
Fri, 17 Sep 2021 11:49:30 +0000 (13:49 +0200)
committerMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Tue, 7 Dec 2021 10:29:53 +0000 (11:29 +0100)
Currently when the allocation of map->name fails the error exit path
does not kfree the previously allocated object map. Fix this by
setting ret to -ENOMEM and taking the free_map exit error path to
ensure map is kfree'd.

Addresses-Coverity: ("Resource leak")

Fixes: 70fa906d6fce ("media: uvcvideo: Use control names from framework")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Ricardo Ribalda <ribalda@chromium.org>
Signed-off-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
drivers/media/usb/uvc/uvc_v4l2.c

index f4e4aff..711556d 100644 (file)
@@ -44,8 +44,10 @@ static int uvc_ioctl_ctrl_map(struct uvc_video_chain *chain,
        if (v4l2_ctrl_get_name(map->id) == NULL) {
                map->name = kmemdup(xmap->name, sizeof(xmap->name),
                                    GFP_KERNEL);
-               if (!map->name)
-                       return -ENOMEM;
+               if (!map->name) {
+                       ret = -ENOMEM;
+                       goto free_map;
+               }
        }
        memcpy(map->entity, xmap->entity, sizeof(map->entity));
        map->selector = xmap->selector;