Arend Van Spriel <arend.vanspriel@xxxxxxxxxxxx> wrote:
> From: "Peter S. Housel" <housel@xxxxxxx>
>
> An earlier change to this function (3bdae810721b) fixed a leak in the
> case of an unsuccessful call to brcmf_sdiod_buffrw(). However, the
> glom_skb buffer, used for emulating a scattering read, is never used
> or referenced after its contents are copied into the destination
> buffers, and therefore always needs to be freed by the end of the
> function.
>
> Fixes: 3bdae810721b ("brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain")
> Fixes: a413e39a38573 ("brcmfmac: fix brcmf_sdcard_recv_chain() for host without sg support")
> Cc: stable@xxxxxxxxxxxxxxx # 4.9.x-
> Signed-off-by: Peter S. Housel <housel@xxxxxxx>
> Signed-off-by: Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx>
Patch applied to wireless-drivers-next.git, thanks.
5ea59db8a375 brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain
--
https://patchwork.kernel.org/patch/9780735/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
