diff options
author | Wei Yongjun <yongjun_wei@trendmicro.com.cn> | 2013-03-15 17:19:26 +0800 |
---|---|---|
committer | Nicholas Bellinger <nab@linux-iscsi.org> | 2013-03-18 12:45:52 -0700 |
commit | 0fb889b83186e54c0cfa79516599f2267fb553fb (patch) | |
tree | 8410aed12c23a81cdd838999b63108421d49a34d /drivers | |
parent | 7ac9ad11b2a5cf77a92b58ee6b672ad2fa155eb1 (diff) | |
download | op-kernel-dev-0fb889b83186e54c0cfa79516599f2267fb553fb.zip op-kernel-dev-0fb889b83186e54c0cfa79516599f2267fb553fb.tar.gz |
target: fix possible memory leak in core_tpg_register()
'se_tpg->tpg_lun_list' is malloced in core_tpg_register() and should be freed
before leaving from the error handling cases, otherwise it will cause memory
leak.
'se_tpg' is malloced out of this function, and will be freed if we return error, so
remove free for 'se_tpg'.
Signed-off-by: Wei Yongjun <yongjun_wei@trendmicro.com.cn>
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Diffstat (limited to 'drivers')
-rw-r--r-- | drivers/target/target_core_tpg.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/drivers/target/target_core_tpg.c b/drivers/target/target_core_tpg.c index 9169d6a..aac9d27 100644 --- a/drivers/target/target_core_tpg.c +++ b/drivers/target/target_core_tpg.c @@ -711,7 +711,8 @@ int core_tpg_register( if (se_tpg->se_tpg_type == TRANSPORT_TPG_TYPE_NORMAL) { if (core_tpg_setup_virtual_lun0(se_tpg) < 0) { - kfree(se_tpg); + array_free(se_tpg->tpg_lun_list, + TRANSPORT_MAX_LUNS_PER_TPG); return -ENOMEM; } } |