4.2.8-ckt3 -stable review patch.  If anyone has any objections, please let me 
know.

---8<------------------------------------------------------------

From: Bart Van Assche <bart.vanass...@sandisk.com>

commit f0a8afecb29ad0005e7e946228a0ef5422058b85 upstream.

strsep() modifies its first argument. Make the pointer passed to kfree()
match the return value of kmalloc().

Fixes: 229d4f112fd6 (commit "target_core_alua: Referrals configfs integration")
Signed-off-by: Bart Van Assche <bart.vanass...@sandisk.com>
Cc: Hannes Reinecke <h...@suse.com>
Cc: Christoph Hellwig <h...@lst.de>
Cc: Andy Grover <agro...@redhat.com>
Cc: Sagi Grimberg <sa...@mellanox.com>
Signed-off-by: Nicholas Bellinger <n...@linux-iscsi.org>
Signed-off-by: Kamal Mostafa <ka...@canonical.com>
---
 drivers/target/target_core_configfs.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/drivers/target/target_core_configfs.c 
b/drivers/target/target_core_configfs.c
index 860e840..e19da34 100644
--- a/drivers/target/target_core_configfs.c
+++ b/drivers/target/target_core_configfs.c
@@ -2137,14 +2137,14 @@ static ssize_t target_core_store_dev_lba_map(
        struct se_device *dev = p;
        struct t10_alua_lba_map *lba_map = NULL;
        struct list_head lba_list;
-       char *map_entries, *ptr;
+       char *map_entries, *orig, *ptr;
        char state;
        int pg_num = -1, pg;
        int ret = 0, num = 0, pg_id, alua_state;
        unsigned long start_lba = -1, end_lba = -1;
        unsigned long segment_size = -1, segment_mult = -1;
 
-       map_entries = kstrdup(page, GFP_KERNEL);
+       orig = map_entries = kstrdup(page, GFP_KERNEL);
        if (!map_entries)
                return -ENOMEM;
 
@@ -2242,7 +2242,7 @@ out:
        } else
                core_alua_set_lba_map(dev, &lba_list,
                                      segment_size, segment_mult);
-       kfree(map_entries);
+       kfree(orig);
        return count;
 }
 
-- 
1.9.1

Reply via email to