From: Lijun Ou <ouli...@huawei.com> Cq has not been freed when fail to ib_copy_to_udata, so need to free it.
Signed-off-by: Lijun Ou <ouli...@huawei.com> Signed-off-by: Peter Chen <luck.c...@huawei.com> Reviewed-by: Wei Hu (Xavier) <xavier.hu...@huawei.com> Signed-off-by: Salil Mehta <salil.me...@huawei.com> --- drivers/infiniband/hw/hns/hns_roce_cq.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/drivers/infiniband/hw/hns/hns_roce_cq.c b/drivers/infiniband/hw/hns/hns_roce_cq.c index 3095f06..0973659 100644 --- a/drivers/infiniband/hw/hns/hns_roce_cq.c +++ b/drivers/infiniband/hw/hns/hns_roce_cq.c @@ -357,12 +357,15 @@ struct ib_cq *hns_roce_ib_create_cq(struct ib_device *ib_dev, if (context) { if (ib_copy_to_udata(udata, &hr_cq->cqn, sizeof(u64))) { ret = -EFAULT; - goto err_mtt; + goto err_cqc; } } return &hr_cq->ib_cq; +err_cqc: + hns_roce_free_cq(hr_dev, hr_cq); + err_mtt: hns_roce_mtt_cleanup(hr_dev, &hr_cq->hr_buf.hr_mtt); if (context) -- 1.7.9.5