Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e9776d0f authored by Trond Myklebust's avatar Trond Myklebust
Browse files

SUNRPC: Fix a pipe_version reference leak 



In gss_alloc_msg(), if the call to gss_encode_v1_msg() fails, we
want to release the reference to the pipe_version that was obtained
earlier in the function.

Fixes: 9d3a2260 (SUNRPC: Fix buffer overflow checking in...)
Signed-off-by: default avatarTrond Myklebust <trond.myklebust@primarydata.com>
parent 9eb2ddb4

net/sunrpc/auth_gss/auth_gss.c

+3 −1
Original line number Diff line number Diff line
@@ -500,10 +500,12 @@ gss_alloc_msg(struct gss_auth *gss_auth, 
	default:

		err = gss_encode_v1_msg(gss_msg, service_name, gss_auth->target_name);

		if (err)

			goto err_free_msg;

			goto err_put_pipe_version;

	};

	kref_get(&gss_auth->kref);

	return gss_msg;

err_put_pipe_version:

	put_pipe_version(gss_auth->net);

err_free_msg:

	kfree(gss_msg);

err: