err = __btrfs_cow_block(trans, root, cur_bh, parent, i,
                                        &tmp_bh, search_start,
                                        min(8, end_slot - i));
-               if (err)
+               if (err) {
+                       brelse(cur_bh);
                        break;
+               }
                search_start = bh_blocknr(tmp_bh);
                *last_ret = search_start;
                if (parent_level == 1)
                      ins_len, int cow)
 {
        struct buffer_head *b;
-       struct buffer_head *cow_buf;
        struct btrfs_node *c;
        u64 blocknr;
        int slot;
                        wret = btrfs_cow_block(trans, root, b,
                                               p->nodes[level + 1],
                                               p->slots[level + 1],
-                                              &cow_buf);
+                                              &b);
                        if (wret) {
-                               btrfs_block_release(root, cow_buf);
+                               btrfs_block_release(root, b);
                                return wret;
                        }
-                       b = cow_buf;
                        c = btrfs_buffer_node(b);
                }
                BUG_ON(!cow && ins_len);
 
        max_push = src_nritems / 2 + 1;
        /* don't try to empty the node */
-       if (max_push > src_nritems)
+       if (max_push >= src_nritems)
                return 1;
+
        if (max_push < push_items)
                push_items = max_push;
 
        ret = btrfs_cow_block(trans, root, t, path->nodes[1], slot - 1, &t);
        if (ret) {
                /* we hit -ENOSPC, but it isn't fatal here */
+               btrfs_block_release(root, t);
                return 1;
        }
        left = btrfs_buffer_leaf(t);