Commit f74ecc0a authored by zhengbin's avatar zhengbin Committed by Khalid Elmously

fuse: fix memleak in cuse_channel_open

BugLink: https://bugs.launchpad.net/bugs/1848780

[ Upstream commit 9ad09b19 ]

If cuse_send_init fails, need to fuse_conn_put cc->fc.

cuse_channel_open->fuse_conn_init->refcount_set(&fc->count, 1)
                 ->fuse_dev_alloc->fuse_conn_get
                 ->fuse_dev_free->fuse_conn_put

Fixes: cc080e9e ("fuse: introduce per-instance fuse_dev structure")
Reported-by: default avatarHulk Robot <hulkci@huawei.com>
Signed-off-by: default avatarzhengbin <zhengbin13@huawei.com>
Signed-off-by: default avatarMiklos Szeredi <mszeredi@redhat.com>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarConnor Kuehl <connor.kuehl@canonical.com>
Signed-off-by: default avatarKhalid Elmously <khalid.elmously@canonical.com>
parent 811912b2
...@@ -514,6 +514,7 @@ static int cuse_channel_open(struct inode *inode, struct file *file) ...@@ -514,6 +514,7 @@ static int cuse_channel_open(struct inode *inode, struct file *file)
rc = cuse_send_init(cc); rc = cuse_send_init(cc);
if (rc) { if (rc) {
fuse_dev_free(fud); fuse_dev_free(fud);
fuse_conn_put(&cc->fc);
return rc; return rc;
} }
file->private_data = fud; file->private_data = fud;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment