mac80211_hwsim: fix memory leak on netlink TX failure
authorBen Greear <greearb@candelatech.com>
Thu, 25 Sep 2014 21:22:18 +0000 (14:22 -0700)
committerJohannes Berg <johannes.berg@intel.com>
Thu, 9 Oct 2014 07:29:44 +0000 (09:29 +0200)
If the packet can't be delivered to userspace (at all or
quickly enough) then it can leak - fix that.

Signed-off-by: Ben Greear <greearb@candelatech.com>
[rewrite commit message]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/mac80211_hwsim.c

index babbdc1ce741c62024bc6220fdcf2a7bd3487790..a74227d8a48591c2025116f77aa9a08d3da233c6 100644 (file)
@@ -862,7 +862,7 @@ static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw,
        if (skb_queue_len(&data->pending) >= MAX_QUEUE) {
                /* Droping until WARN_QUEUE level */
                while (skb_queue_len(&data->pending) >= WARN_QUEUE)
-                       skb_dequeue(&data->pending);
+                       ieee80211_free_txskb(hw, skb_dequeue(&data->pending));
        }
 
        skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_ATOMIC);
@@ -921,6 +921,7 @@ static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw,
 
 nla_put_failure:
        printk(KERN_DEBUG "mac80211_hwsim: error occurred in %s\n", __func__);
+       ieee80211_free_txskb(hw, my_skb);
 }
 
 static bool hwsim_chans_compat(struct ieee80211_channel *c1,