2 files changed, 3 insertions, 0 deletions

diff --git a/drivers/infiniband/hw/ipath/ipath_init_chip.c b/drivers/infiniband/hw/ipath/ipath_init_chip.c
index e9b5534f215a..37cd96e96e3e 100644
--- a/drivers/infiniband/hw/ipath/ipath_init_chip.c
+++ b/drivers/infiniband/hw/ipath/ipath_init_chip.c
@@ -115,6 +115,7 @@ static int create_port0_egr(struct ipath_devdata *dd)
                                       "eager TID %u\n", e);
                         while (e != 0)
                                 dev_kfree_skb(skbs[--e]);
+                        vfree(skbs);
                         ret = -ENOMEM;
                         goto bail;
                 }
diff --git a/drivers/infiniband/hw/ipath/ipath_qp.c b/drivers/infiniband/hw/ipath/ipath_qp.c
index e6fc4c02823f..fd4d55bdee78 100644
--- a/drivers/infiniband/hw/ipath/ipath_qp.c
+++ b/drivers/infiniband/hw/ipath/ipath_qp.c
@@ -692,6 +692,7 @@ struct ib_qp *ipath_create_qp(struct ib_pd *ibpd,
         case IB_QPT_GSI:
                 qp = kmalloc(sizeof(*qp), GFP_KERNEL);
                 if (!qp) {
+                        vfree(swq);
                         ret = ERR_PTR(-ENOMEM);
                         goto bail;
                 }
@@ -702,6 +703,7 @@ struct ib_qp *ipath_create_qp(struct ib_pd *ibpd,
                 qp->r_rq.wq = vmalloc(qp->r_rq.size * sz);
                 if (!qp->r_rq.wq) {
                         kfree(qp);
+                        vfree(swq);
                         ret = ERR_PTR(-ENOMEM);
                         goto bail;
                 }