@@ -515,7 +515,7 @@ static int skcipher_recvmsg_async(struct socket *sock, struct msghdr *msg,
bool mark = false;
char *iv;
- sreq = kzalloc(sizeof(*req) + reqsize + ivsize, GFP_KERNEL);
+ sreq = kzalloc(sizeof(*sreq) + reqsize + ivsize, GFP_KERNEL);
if (unlikely(!sreq))
goto out;
@@ -528,7 +528,7 @@ static int skcipher_recvmsg_async(struct socket *sock, struct msghdr *msg,
lock_sock(sk);
sreq->tsg = kcalloc(tx_nents, sizeof(*sg), GFP_KERNEL);
if (unlikely(!sreq->tsg))
- goto unlock;
+ goto free;
sg_init_table(sreq->tsg, tx_nents);
memcpy(iv, ctx->iv, ivsize);
skcipher_request_set_tfm(req, tfm);
@@ -619,10 +619,10 @@ static int skcipher_recvmsg_async(struct socket *sock, struct msghdr *msg,
}
free:
skcipher_free_async_sgls(sreq);
+ kzfree(sreq);
unlock:
skcipher_wmem_wakeup(sk);
release_sock(sk);
- kzfree(sreq);
out:
return err;
}