Patch "brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain" has been added to the 4.4-stable tree

This is a note to let you know that I've just added the patch titled

brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain

to the 4.4-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
brcmfmac-fix-glob_skb-leak-in-brcmf_sdiod_recv_chain.patch
and it can be found in the queue-4.4 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.

From: Florian Fainelli <[email protected]>
Date: Mon, 18 Jul 2016 16:24:34 -0700
Subject: brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain

From: Florian Fainelli <[email protected]>

commit 3bdae810721b33061d2e541bd78a70f86ca42af3 upstream.

In case brcmf_sdiod_recv_chain() cannot complete a succeful call to brcmf_sdiod_buffrw, we would be leaking glom_skb and not free it as we should, fix this.

---
 drivers/net/wireless/brcm80211/brcmfmac/bcmsdh.c |    4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

@@ -726,8 +726,10 @@ int brcmf_sdiod_recv_chain(struct brcmf_
 			return -ENOMEM;
 		err = brcmf_sdiod_buffrw(sdiodev, SDIO_FUNC_2, false, addr,
 					 glom_skb);
-		if (err)
+		if (err) {
+			brcmu_pkt_buf_free_skb(glom_skb);
 			goto done;
+		}
 
 		skb_queue_walk(pktq, skb) {
 			memcpy(skb->data, glom_skb->data, skb->len);

Patches currently in stable-queue which might be from [email protected] are

queue-4.4/brcmfmac-fix-glob_skb-leak-in-brcmf_sdiod_recv_chain.patch queue-4.4/brcmsmac-free-packet-if-dma_mapping_error-fails-in-dma_rxfill.patch queue-4.4/brcmsmac-initialize-power-in-brcms_c_stf_ss_algo_channel_get.patch