summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorZhu Wang <wangzhu9@huawei.com>2023-08-03 10:02:30 +0800
committerMartin K. Petersen <martin.petersen@oracle.com>2023-08-07 21:34:08 -0400
commit04b5b5cb0136ce970333a9c6cec7e46adba1ea3a (patch)
treee95c5f8a2dd01aebdbfc083853fe874bd21aa85c
parent9426d3cef5000824e5f24f80ed5f42fb935f2488 (diff)
downloadlinux-stable-04b5b5cb0136ce970333a9c6cec7e46adba1ea3a.tar.gz
linux-stable-04b5b5cb0136ce970333a9c6cec7e46adba1ea3a.tar.bz2
linux-stable-04b5b5cb0136ce970333a9c6cec7e46adba1ea3a.zip
scsi: core: Fix possible memory leak if device_add() fails
If device_add() returns error, the name allocated by dev_set_name() needs be freed. As the comment of device_add() says, put_device() should be used to decrease the reference count in the error path. So fix this by calling put_device(), then the name can be freed in kobject_cleanp(). Fixes: ee959b00c335 ("SCSI: convert struct class_device to struct device") Signed-off-by: Zhu Wang <wangzhu9@huawei.com> Link: https://lore.kernel.org/r/20230803020230.226903-1-wangzhu9@huawei.com Reviewed-by: Bart Van Assche <bvanassche@acm.org> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
-rw-r--r--drivers/scsi/raid_class.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/scsi/raid_class.c b/drivers/scsi/raid_class.c
index 898a0bdf8df6..711252e52d8e 100644
--- a/drivers/scsi/raid_class.c
+++ b/drivers/scsi/raid_class.c
@@ -248,6 +248,7 @@ int raid_component_add(struct raid_template *r,struct device *raid_dev,
return 0;
err_out:
+ put_device(&rc->dev);
list_del(&rc->node);
rd->component_count--;
put_device(component_dev);