[net-next 1/1] tipc: fix bug on error path in tipc_topsrv_kern_subscr()

[Jon Maloy]

In commit cc1ea9ffadf7 ("tipc: eliminate struct tipc_subscriber") we
re-introduced an old bug on the error path in the function
tipc_topsrv_kern_subscr(). We now re-introduce the correction too.

Reported-by: syzbot+f62e0f2a0ef578703...@syzkaller.appspotmail.com
Signed-off-by: Jon Maloy <jon.ma...@ericsson.com>
---
 net/tipc/topsrv.c | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/net/tipc/topsrv.c b/net/tipc/topsrv.c
index 02013e0..25925be 100644
--- a/net/tipc/topsrv.c
+++ b/net/tipc/topsrv.c
@@ -580,9 +580,10 @@ bool tipc_topsrv_kern_subscr(struct net *net, u32 port, 
u32 type, u32 lower,
        *conid = con->conid;
        con->sock = NULL;
        rc = tipc_conn_rcv_sub(tipc_topsrv(net), con, &sub);
-       if (rc < 0)
-               tipc_conn_close(con);
-       return !rc;
+       if (rc >= 0)
+               return true;
+       conn_put(con);
+       return false;
 }
 
 void tipc_topsrv_kern_unsubscr(struct net *net, int conid)
-- 
2.1.4