diff options
| author | Haoxiang Li <lihaoxiang@isrc.iscas.ac.cn> | 2026-05-26 13:21:39 +0000 |
|---|---|---|
| committer | Konstantin Belousov <kib@FreeBSD.org> | 2026-06-04 00:24:13 +0000 |
| commit | 21fb5a5e61c333131cfbb4b522db00142a905707 (patch) | |
| tree | 3ed88830338afceebf837f88282e79427721fbe5 | |
| parent | 303df71969f5547922c942b7fc866320ceee4260 (diff) | |
smbfs: plug smbfs_node_alloc() leak of name buffers when insmntque() fails
PR: 295577
(cherry picked from commit f0e702a7a289f0f350bdaeb943805d6d17f9e403)
| -rw-r--r-- | sys/fs/smbfs/smbfs_node.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/fs/smbfs/smbfs_node.c b/sys/fs/smbfs/smbfs_node.c index 9893987f7ccd..b2b5d63e2eaf 100644 --- a/sys/fs/smbfs/smbfs_node.c +++ b/sys/fs/smbfs/smbfs_node.c @@ -212,6 +212,10 @@ smbfs_node_alloc(struct mount *mp, struct vnode *dvp, const char *dirnm, SMBERROR("new vnode '%s' born without parent ?\n", np->n_name); error = insmntque(vp, mp); if (error) { + smbfs_name_free(np->n_name); + free(np->n_rpath, M_SMBNODENAME); + if (np->n_parent != NULL && (np->n_flag & NREFPARENT) != 0) + vrele(np->n_parent); free(np, M_SMBNODE); return (error); } |