[PATCH 4.9 23/78] i40e: Memory leak in i40e_config_iwarp_qvlist

[Greg Kroah-Hartman]

From: Martyna Szapar <martyna.sza...@intel.com>

commit 0b63644602cfcbac849f7ea49272a39e90fa95eb upstream.

Added freeing the old allocation of vf->qvlist_info in function
i40e_config_iwarp_qvlist before overwriting it with
the new allocation.

Signed-off-by: Martyna Szapar <martyna.sza...@intel.com>
Tested-by: Andrew Bowers <andrewx.bow...@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirs...@intel.com>
[bwh: Backported to 4.9: adjust context]
Signed-off-by: Ben Hutchings <ben.hutchi...@codethink.co.uk>
Signed-off-by: Sasha Levin <sas...@kernel.org>
---
 .../ethernet/intel/i40e/i40e_virtchnl_pf.c    | 23 ++++++++++++-------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c 
b/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
index e6798b0d1cae0..e3e02ec8f1498 100644
--- a/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
+++ b/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
@@ -417,6 +417,7 @@ static int i40e_config_iwarp_qvlist(struct i40e_vf *vf,
        u32 v_idx, i, reg_idx, reg;
        u32 next_q_idx, next_q_type;
        u32 msix_vf, size;
+       int ret = 0;
 
        msix_vf = pf->hw.func_caps.num_msix_vectors_vf;
 
@@ -425,16 +426,19 @@ static int i40e_config_iwarp_qvlist(struct i40e_vf *vf,
                         "Incorrect number of iwarp vectors %u. Maximum %u 
allowed.\n",
                         qvlist_info->num_vectors,
                         msix_vf);
-               goto err;
+               ret = -EINVAL;
+               goto err_out;
        }
 
        size = sizeof(struct i40e_virtchnl_iwarp_qvlist_info) +
               (sizeof(struct i40e_virtchnl_iwarp_qv_info) *
                                                (qvlist_info->num_vectors - 1));
+       kfree(vf->qvlist_info);
        vf->qvlist_info = kzalloc(size, GFP_KERNEL);
-       if (!vf->qvlist_info)
-               return -ENOMEM;
-
+       if (!vf->qvlist_info) {
+               ret = -ENOMEM;
+               goto err_out;
+       }
        vf->qvlist_info->num_vectors = qvlist_info->num_vectors;
 
        msix_vf = pf->hw.func_caps.num_msix_vectors_vf;
@@ -445,8 +449,10 @@ static int i40e_config_iwarp_qvlist(struct i40e_vf *vf,
                v_idx = qv_info->v_idx;
 
                /* Validate vector id belongs to this vf */
-               if (!i40e_vc_isvalid_vector_id(vf, v_idx))
-                       goto err;
+               if (!i40e_vc_isvalid_vector_id(vf, v_idx)) {
+                       ret = -EINVAL;
+                       goto err_free;
+               }
 
                vf->qvlist_info->qv_info[i] = *qv_info;
 
@@ -488,10 +494,11 @@ static int i40e_config_iwarp_qvlist(struct i40e_vf *vf,
        }
 
        return 0;
-err:
+err_free:
        kfree(vf->qvlist_info);
        vf->qvlist_info = NULL;
-       return -EINVAL;
+err_out:
+       return ret;
 }
 
 /**
-- 
2.27.0