OSDN Git Service
(root)
/
uclinux-h8
/
linux.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
b9010f1
)
wil6210: fix invalid memory access for rx_buff_mgmt debugfs
author
Dedy Lansky
<dlansky@codeaurora.org>
Thu, 23 Aug 2018 11:47:13 +0000
(14:47 +0300)
committer
Kalle Valo
<kvalo@codeaurora.org>
Tue, 28 Aug 2018 13:49:15 +0000
(16:49 +0300)
Check rx_buff_mgmt is allocated before accessing its internal fields.
Signed-off-by: Dedy Lansky <dlansky@codeaurora.org>
Signed-off-by: Maya Erez <merez@codeaurora.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/ath/wil6210/debugfs.c
patch
|
blob
|
history
diff --git
a/drivers/net/wireless/ath/wil6210/debugfs.c
b/drivers/net/wireless/ath/wil6210/debugfs.c
index
6973333
..
965c61b
100644
(file)
--- a/
drivers/net/wireless/ath/wil6210/debugfs.c
+++ b/
drivers/net/wireless/ath/wil6210/debugfs.c
@@
-1237,6
+1237,9
@@
static int wil_rx_buff_mgmt_debugfs_show(struct seq_file *s, void *data)
int num_active;
int num_free;
+ if (!rbm->buff_arr)
+ return -EINVAL;
+
seq_printf(s, " size = %zu\n", rbm->size);
seq_printf(s, " free_list_empty_cnt = %lu\n",
rbm->free_list_empty_cnt);