[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CAPgLHd8rsNm8pbQozGrpcB-DWD94Av8dj-98eFh2Efn4nZOzaw@mail.gmail.com>
Date: Wed, 28 Nov 2012 21:30:01 -0500
From: Wei Yongjun <weiyj.lk@...il.com>
To: gregkh@...uxfoundation.org
Cc: yongjun_wei@...ndmicro.com.cn, devel@...verdev.osuosl.org,
linux-kernel@...r.kernel.org
Subject: [PATCH -next] staging: sb105x: fix potential NULL pointer dereference
in mp_chars_in_buffer()
From: Wei Yongjun <yongjun_wei@...ndmicro.com.cn>
The dereference to 'state' should be moved below the NULL test.
Signed-off-by: Wei Yongjun <yongjun_wei@...ndmicro.com.cn>
---
drivers/staging/sb105x/sb_pci_mp.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/staging/sb105x/sb_pci_mp.c b/drivers/staging/sb105x/sb_pci_mp.c
index fbebf88..edb2a85 100644
--- a/drivers/staging/sb105x/sb_pci_mp.c
+++ b/drivers/staging/sb105x/sb_pci_mp.c
@@ -689,13 +689,14 @@ static int mp_chars_in_buffer(struct tty_struct *tty)
static void mp_flush_buffer(struct tty_struct *tty)
{
struct sb_uart_state *state = tty->driver_data;
- struct sb_uart_port *port = state->port;
+ struct sb_uart_port *port;
unsigned long flags;
if (!state || !state->info) {
return;
}
+ port = state->port;
spin_lock_irqsave(&port->lock, flags);
uart_circ_clear(&state->info->xmit);
spin_unlock_irqrestore(&port->lock, flags);
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists