dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()

Fix a memory leak in gpi_peripheral_config() where the original memory
pointed to by gchan->config could be lost if krealloc() fails.

The issue occurs when:
1. gchan->config points to previously allocated memory
2. krealloc() fails and returns NULL
3. The function directly assigns NULL to gchan->config, losing the
reference to the original memory
4. The original memory becomes unreachable and cannot be freed

Fix this by using a temporary variable to hold the krealloc() result
and only updating gchan->config when the allocation succeeds.

Found via static analysis and code review.

Fixes: 5d0c3533a19f ("dmaengine: qcom: Add GPI dma driver")
Cc: stable@vger.kernel.org
Signed-off-by: Miaoqian Lin <linmq006@gmail.com>
Reviewed-by: Bjorn Andersson <andersson@kernel.org>
Link: https://patch.msgid.link/20251029123421.91973-1-linmq006@gmail.com
Signed-off-by: Vinod Koul <vkoul@kernel.org>

authored by Miaoqian Lin and committed by Vinod Koul 3f747004 747213b0

+4 -2
+4 -2
drivers/dma/qcom/gpi.c
··· 1605 gpi_peripheral_config(struct dma_chan *chan, struct dma_slave_config *config) 1606 { 1607 struct gchan *gchan = to_gchan(chan); 1608 1609 if (!config->peripheral_config) 1610 return -EINVAL; 1611 1612 - gchan->config = krealloc(gchan->config, config->peripheral_size, GFP_NOWAIT); 1613 - if (!gchan->config) 1614 return -ENOMEM; 1615 1616 memcpy(gchan->config, config->peripheral_config, config->peripheral_size); 1617 1618 return 0;
··· 1605 gpi_peripheral_config(struct dma_chan *chan, struct dma_slave_config *config) 1606 { 1607 struct gchan *gchan = to_gchan(chan); 1608 + void *new_config; 1609 1610 if (!config->peripheral_config) 1611 return -EINVAL; 1612 1613 + new_config = krealloc(gchan->config, config->peripheral_size, GFP_NOWAIT); 1614 + if (!new_config) 1615 return -ENOMEM; 1616 1617 + gchan->config = new_config; 1618 memcpy(gchan->config, config->peripheral_config, config->peripheral_size); 1619 1620 return 0;