A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-10 22:40:54 -04:00
Code Issues Projects Releases Packages Wiki Activity

greybus: legacy: fix a null pointer dereference

Browse source 
When gb_protocol_get() fails in legacy_connection_create(), we end up
bailing-out before assigning lc->connection and lc->protocol. Calling
legacy_connection_destroy() in that case results in a null pointer
dereference.

Check if lc->connection is not null before freeing it.

Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com>
Reviewed-by: Johan Hovold <johan@hovoldconsulting.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
This commit is contained in:
Bartosz Golaszewski 2016-01-27 13:17:52 +01:00 • committed by Greg Kroah-Hartman
commit 6e304f5963
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
drivers/staging/greybus/legacy.c
View file

@ -148,6 +148,9 @@ err_protocol_put:
static void legacy_connection_destroy(struct legacy_connection *lc)
{
if (!lc->connection)
return;
lc->connection->protocol = NULL;
gb_connection_destroy(lc->connection);