diff options
author | Dan Carpenter <dan.carpenter@linaro.org> | 2025-09-05 11:02:14 +0300 |
---|---|---|
committer | Johannes Berg <johannes.berg@intel.com> | 2025-09-05 10:46:04 +0200 |
commit | e3ac93e9d916ebae0711a42f524429dad89c4887 (patch) | |
tree | 5bebe01220f710b7e3ab5edca3777de4ead397b0 | |
parent | e53f8b12a21c2974b66fa8c706090182da06fff3 (diff) |
wifi: mwifiex: fix double free in mwifiex_send_rgpower_table()
The "hostcmd" is freed using cleanup.h, so calling kfree() will lead to
a double free. Delete the kfree().
Fixes: 7b6f16a25806 ("wifi: mwifiex: add rgpower table loading support")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Francesco Dolcini <francesco.dolcini@toradex.com>
Link: https://patch.msgid.link/aLqZBh5_dSHUb4AE@stanley.mountain
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
-rw-r--r-- | drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/drivers/net/wireless/marvell/mwifiex/sta_cmd.c b/drivers/net/wireless/marvell/mwifiex/sta_cmd.c index 6d9e2af29a69..91d5098081e8 100644 --- a/drivers/net/wireless/marvell/mwifiex/sta_cmd.c +++ b/drivers/net/wireless/marvell/mwifiex/sta_cmd.c @@ -1521,10 +1521,8 @@ int mwifiex_send_rgpower_table(struct mwifiex_private *priv, const u8 *data, return -ENOMEM; _data = kmemdup(data, size, GFP_KERNEL); - if (!_data) { - kfree(hostcmd); + if (!_data) return -ENOMEM; - } pos = _data; ptr = hostcmd->cmd; |