From d6ccbf749e595b950fa38ed3719d7e0092200401 Mon Sep 17 00:00:00 2001 From: Tanwee Kausar Date: Wed, 15 Jul 2020 12:37:14 -0700 Subject: [PATCH] crypto: msm: Fix null pointer dereference Fixing possible null pointer dereference of sg_src when nbytes exceed. Change-Id: I91a2a274f11646bc65c4eb0d14a82d4ed81f4e42 Signed-off-by: Tanwee Kausar --- drivers/crypto/msm/qce50.c | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/drivers/crypto/msm/qce50.c b/drivers/crypto/msm/qce50.c index 761bc1f8da20..0132730cfc9b 100644 --- a/drivers/crypto/msm/qce50.c +++ b/drivers/crypto/msm/qce50.c @@ -2435,10 +2435,7 @@ static int _qce_sps_add_sg_data(struct qce_device *pce_dev, struct sps_iovec *iovec = sps_bam_pipe->iovec + sps_bam_pipe->iovec_count; - if (!sg_src) - return -ENOENT; - - while (nbytes > 0) { + while (nbytes > 0 && sg_src) { len = min(nbytes, sg_dma_len(sg_src)); nbytes -= len; addr = sg_dma_address(sg_src);