clocksource/drivers/bcm2835_timer: Fix memory leak of timer
authorColin Ian King <colin.king@canonical.com>
Thu, 19 Dec 2019 21:32:46 +0000 (21:32 +0000)
committerDaniel Lezcano <daniel.lezcano@linaro.org>
Thu, 16 Jan 2020 18:06:57 +0000 (19:06 +0100)
Currently when setup_irq fails the error exit path will leak the
recently allocated timer structure.  Originally the code would
throw a panic but a later commit changed the behaviour to return
via the err_iounmap path and hence we now have a memory leak. Fix
this by adding a err_timer_free error path that kfree's timer.

Addresses-Coverity: ("Resource Leak")
Fixes: 524a7f08983d ("clocksource/drivers/bcm2835_timer: Convert init function to return error")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Daniel Lezcano <daniel.lezcano@linaro.org>
Link: https://lore.kernel.org/r/20191219213246.34437-1-colin.king@canonical.com
drivers/clocksource/bcm2835_timer.c

index 2b196cb..b235f44 100644 (file)
@@ -121,7 +121,7 @@ static int __init bcm2835_timer_init(struct device_node *node)
        ret = setup_irq(irq, &timer->act);
        if (ret) {
                pr_err("Can't set up timer IRQ\n");
-               goto err_iounmap;
+               goto err_timer_free;
        }
 
        clockevents_config_and_register(&timer->evt, freq, 0xf, 0xffffffff);
@@ -130,6 +130,9 @@ static int __init bcm2835_timer_init(struct device_node *node)
 
        return 0;
 
+err_timer_free:
+       kfree(timer);
+
 err_iounmap:
        iounmap(base);
        return ret;