Received: by 2002:a05:6a10:206:0:0:0:0 with SMTP id 6csp4745929pxj; Wed, 12 May 2021 12:15:14 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwwLHvh120DpO+2tIBco4T3qZR708ngRnytQVkH1mUak7vZCTsYOdJP7wI2Yd9faFXjBLHQ X-Received: by 2002:a17:906:3b10:: with SMTP id g16mr40046288ejf.232.1620846790439; Wed, 12 May 2021 12:13:10 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1620846790; cv=none; d=google.com; s=arc-20160816; b=I/2zplQRWH3TSNuhbvfkBaZ4ceUeXonIthJz0X3dHbMgYSCqyhvwIG289rHgbEkYS0 X1n4gaHi9oSjYtfOncyqMMASkhHAGSDKDF+JXQtMJBy1eS35rmDAdMyxJuIJmLJlbOV2 zn77cFDbOhSDXjUiKECfdztPUrrHppgTr+CHDjlkQT3AV5j0CinOkDzzWLf9wC1EO87N 431IN/J/+L94/JFS4K+Uu01CzvNkTYrBBDqjHpUtRk1ca4TyhoTeDcLSMepfM8fpHdu8 8Yi23cCWaQR0YyNnO96gmQoG9u0+Gxxsyu8MjAH7+mvS5wMzyxN7xLxPlP6o90L2DUFF 5tLw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :user-agent:references:in-reply-to:message-id:date:subject:cc:to :from:dkim-signature; bh=0U5k5TSnfCmf++BKthhm+bvztIJ6hx/fb5N+3CyH/50=; b=JafvXXBytnUIqPawE7LNJ1S0JVYbz/jodln6K5w3RJVPdjjIgEeSyb7ZS8HCF1FGRH d8Rtp/1UF1lWxo1xBIpYSwo1KCD2atBpTFsK0UQHvHFm+qkdtraZDl12F7aZYeqb9O3+ Gdscr1I5Hm956YaGUdfKwxR+I+hyS0KSXdca8Yf8w74fpNtpKmeOwxPUtNUVMEfTWK2o C2xcezGJ8GqIbn81oTOOZjCuWfkP2/EzsHQzTCazAKgIVHRMfyFW62EivxIZAzUatcq3 oRDxU/VGvfHXLAj/pwLYdO+8ZmSmITXjvM0dmMgzy2ertg6f2FwyF/TFslqwZMFHfRhY v4EQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=MEKFf2ih; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id h26si407430edv.512.2021.05.12.12.12.46; Wed, 12 May 2021 12:13:10 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@linuxfoundation.org header.s=korg header.b=MEKFf2ih; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=linuxfoundation.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1376995AbhELS4L (ORCPT + 99 others); Wed, 12 May 2021 14:56:11 -0400 Received: from mail.kernel.org ([198.145.29.99]:35834 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S244197AbhELQmm (ORCPT ); Wed, 12 May 2021 12:42:42 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id 5373461C71; Wed, 12 May 2021 16:11:27 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1620835887; bh=mDMXlIFEngb3Uj/DykP8JSnHilYmwXjGmg3Kup2eyPY=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=MEKFf2ihB5bkXPB8JypphdwLDU8K8PKpyDd2gXHy4Uz9/TtiDJsDTHSL6kBnf/FG/ lOb1r6fhrnmkdzKwzzQ/UBI99LNrMYTFbqYb5H+R/LSnXxYsjLrOQwt+lX8KNo1AGY RHfYnO0Xh/dO8o/4DX5/WIOmy+Ar7BEa0NAnEKA0= From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman , stable@vger.kernel.org, Lorenzo Bianconi , Felix Fietkau , Sasha Levin Subject: [PATCH 5.12 523/677] mt76: mt7615: fix memory leak in mt7615_coredump_work Date: Wed, 12 May 2021 16:49:29 +0200 Message-Id: <20210512144854.762647775@linuxfoundation.org> X-Mailer: git-send-email 2.31.1 In-Reply-To: <20210512144837.204217980@linuxfoundation.org> References: <20210512144837.204217980@linuxfoundation.org> User-Agent: quilt/0.66 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Lorenzo Bianconi [ Upstream commit 49cc85059a2cb656f96ff3693f891e8fe8f669a9 ] Similar to the issue fixed in mt7921_coredump_work, fix a possible memory leak in mt7615_coredump_work routine. Fixes: d2bf7959d9c0f ("mt76: mt7663: introduce coredump support") Signed-off-by: Lorenzo Bianconi Signed-off-by: Felix Fietkau Signed-off-by: Sasha Levin --- drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/net/wireless/mediatek/mt76/mt7615/mac.c b/drivers/net/wireless/mediatek/mt76/mt7615/mac.c index 1abfd58e8f49..b313442b2d9e 100644 --- a/drivers/net/wireless/mediatek/mt76/mt7615/mac.c +++ b/drivers/net/wireless/mediatek/mt76/mt7615/mac.c @@ -2308,8 +2308,10 @@ void mt7615_coredump_work(struct work_struct *work) break; skb_pull(skb, sizeof(struct mt7615_mcu_rxd)); - if (data + skb->len - dump > MT76_CONNAC_COREDUMP_SZ) - break; + if (data + skb->len - dump > MT76_CONNAC_COREDUMP_SZ) { + dev_kfree_skb(skb); + continue; + } memcpy(data, skb->data, skb->len); data += skb->len; -- 2.30.2