A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-11 15:11:48 -04:00
Code Issues Projects Releases Packages Wiki Activity

msm: mhi-dev: Check to avoid null pointer dereference

Browse source 
If mhi is not enabled the channels ring remain uninitialized. The host
might reset mhi which will result in device crash due to
null pointer dereference for the channel ring. Check if the pointer is
NULL before dereferencing it to avoid the crash.

Change-Id: I582f9a8a6c9bdca8d5f57e1800b566cca389b830
Signed-off-by: Gauri Joshi <gaurjosh@codeaurora.org>
This commit is contained in:
Gauri Joshi 2021-07-19 22:06:59 -07:00
commit 0b5165ee1a
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
drivers/platform/msm/mhi_dev/mhi.c
View file

@ -2359,9 +2359,8 @@ static int mhi_dev_abort(struct mhi_dev *mhi)
/* Hard stop all the channels */
for (ch_id = 0; ch_id < mhi->cfg.channels; ch_id++) {
ring = &mhi->ring[ch_id + mhi->ch_ring_start];
if (ring->state == RING_STATE_UINT)
if (!ring || ring->state == RING_STATE_UINT)
continue;
ch = &mhi->ch[ch_id];
mutex_lock(&ch->ch_lock);
mhi->ch[ch_id].state = MHI_DEV_CH_STOPPED;