[PATCH] fix: crypto/tegra: tegra_se_host1x_submit: timeout path leaks host1x_job reference

[WenTao Liang]

When host1x_syncpt_wait returns a timeout error, the function returns ret
  directly without calling host1x_job_put(job). The job reference acquired
  by host1x_job_alloc is properly released on all other error paths via the
  job_put label but is missing on the timeout path.

Cc: stable@xxxxxxxxxxxxxxx
Fixes: 0880bb3b00c8 ("crypto: tegra - Add Tegra Security Engine driver")
Signed-off-by: WenTao Liang <vulab@xxxxxxxxxxx>
---
 drivers/crypto/tegra/tegra-se-main.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/drivers/crypto/tegra/tegra-se-main.c b/drivers/crypto/tegra/tegra-se-main.c
index eb71113ed146..7fbf69236ff2 100644
--- a/drivers/crypto/tegra/tegra-se-main.c
+++ b/drivers/crypto/tegra/tegra-se-main.c
@@ -180,6 +180,7 @@ int tegra_se_host1x_submit(struct tegra_se *se, struct tegra_se_cmdbuf *cmdbuf,
 				 MAX_SCHEDULE_TIMEOUT, NULL);
 	if (ret) {
 		dev_err(se->dev, "host1x job timed out\n");
+		host1x_job_put(job);
 		return ret;
 	}
 
-- 
2.39.5 (Apple Git-154)