In the error paths in brcmf_flowring_add_tdls_peer() the allocated
resource should be freed.

Reviewed-by: Hante Meuleman <hante.meule...@broadcom.com>
Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesbe...@broadcom.com>
Signed-off-by: Arend van Spriel <arend.vanspr...@broadcom.com>
---
 drivers/net/wireless/broadcom/brcm80211/brcmfmac/flowring.c | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/flowring.c 
b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/flowring.c
index 7e269f9..b16b367 100644
--- a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/flowring.c
+++ b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/flowring.c
@@ -495,14 +495,18 @@ void brcmf_flowring_add_tdls_peer(struct brcmf_flowring 
*flow, int ifidx,
        } else {
                search = flow->tdls_entry;
                if (memcmp(search->mac, peer, ETH_ALEN) == 0)
-                       return;
+                       goto free_entry;
                while (search->next) {
                        search = search->next;
                        if (memcmp(search->mac, peer, ETH_ALEN) == 0)
-                               return;
+                               goto free_entry;
                }
                search->next = tdls_entry;
        }
 
        flow->tdls_active = true;
+       return;
+
+free_entry:
+       kfree(tdls_entry);
 }
-- 
1.9.1

Reply via email to