If memdup_user() fails then it will return the error code in ERR_PTR. We
were checking it with IS_ERR but then again trying to free it on the
error path.
Signed-off-by: Sudip Mukherjee <sudip@vectorindia.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
                if (size && wrq->u.data.pointer) {
 
                        buff = memdup_user(wrq->u.data.pointer, wrq->u.data.length);
-                       if (IS_ERR(buff)) {
-                               s32Error = PTR_ERR(buff);
-                               goto done;
-                       }
+                       if (IS_ERR(buff))
+                               return PTR_ERR(buff);
 
                        if (strncasecmp(buff, "RSSI", length) == 0) {