summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorZhu Wang <wangzhu9@huawei.com>2023-08-03 05:02:30 +0300
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2023-08-16 19:10:55 +0300
commit63956ad27a6882f01fea7c69e17823090f4c7b3f (patch)
treef7a10a12a74104c23c15534bdf230042910f79b0
parent789275f7c0544374d40bc8d9c81f96751a41df45 (diff)
downloadlinux-63956ad27a6882f01fea7c69e17823090f4c7b3f.tar.xz
scsi: core: Fix possible memory leak if device_add() fails
commit 04b5b5cb0136ce970333a9c6cec7e46adba1ea3a upstream. If device_add() returns error, the name allocated by dev_set_name() needs be freed. As the comment of device_add() says, put_device() should be used to decrease the reference count in the error path. So fix this by calling put_device(), then the name can be freed in kobject_cleanp(). Fixes: ee959b00c335 ("SCSI: convert struct class_device to struct device") Signed-off-by: Zhu Wang <wangzhu9@huawei.com> Link: https://lore.kernel.org/r/20230803020230.226903-1-wangzhu9@huawei.com Reviewed-by: Bart Van Assche <bvanassche@acm.org> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
-rw-r--r--drivers/scsi/raid_class.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/scsi/raid_class.c b/drivers/scsi/raid_class.c
index cddd78893b46..37b93c3c9451 100644
--- a/drivers/scsi/raid_class.c
+++ b/drivers/scsi/raid_class.c
@@ -248,6 +248,7 @@ int raid_component_add(struct raid_template *r,struct device *raid_dev,
return 0;
err_out:
+ put_device(&rc->dev);
list_del(&rc->node);
rd->component_count--;
put_device(component_dev);