[PATCH] IB: fix potential ib_umad leak

Free all unclaimed MAD receive buffers when userspace closes our file so we
don't leak memory.

Signed-off-by: Roland Dreier <[e-mail]>
Signed-off-by: Andrew Morton <[e-mail]>
Signed-off-by: Linus Torvalds <[e-mail]>

drivers/infiniband/core/user_mad.c

···
 static int ib_umad_close(struct inode *inode, struct file *filp)
 {
 	struct ib_umad_file *file = filp->private_data;
+	struct ib_umad_packet *packet, *tmp;
 	int i;
 
 	for (i = 0; i < IB_UMAD_MAX_AGENTS; ++i)
···
 			ib_dereg_mr(file->mr[i]);
 			ib_unregister_mad_agent(file->agent[i]);
 		}
+
+	list_for_each_entry_safe(packet, tmp, &file->recv_list, list)
+		kfree(packet);
 
 	kfree(file);