samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cnss2: Fix potential TME NULL pointer dereference

Browse Source 
Fix potential NULL pointer dereference for tme_lite_mem
and tme_opt_file_mem, which are captured by static
analysis tool.

Change-Id: Ib2540669c55e771598dd21d8c2ae3eb297ffa67f
CRs-Fixed: 3716873
This commit is contained in:
Jia Ding
2024-01-26 14:04:50 +08:00
committed by Ravindra Konda
parent 33c6ef08af
commit fbe33f423c
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cnss2/pci.c
View File

@@ -5077,6 +5077,9 @@ int cnss_pci_load_tme_opt_file(struct cnss_pci_data *pci_priv,
return 0; return 0;
} }
if (!tme_lite_mem)
return 0;
if (!tme_lite_mem->va && !tme_lite_mem->size) { if (!tme_lite_mem->va && !tme_lite_mem->size) {
cnss_pci_add_fw_prefix_name(pci_priv, filename, cnss_pci_add_fw_prefix_name(pci_priv, filename,
tme_opt_filename); tme_opt_filename);

3
cnss2/qmi.c
View File

@@ -1023,7 +1023,8 @@ int cnss_wlfw_tme_opt_file_dnld_send_sync(struct cnss_plat_data *plat_priv,
file_name = TME_DPR_FILE_NAME; file_name = TME_DPR_FILE_NAME;
} }
if (!tme_opt_file_mem->pa || !tme_opt_file_mem->size) { if (!tme_opt_file_mem || !tme_opt_file_mem->pa ||
!tme_opt_file_mem->size) {
cnss_pr_err("Memory for TME opt file is not available\n"); cnss_pr_err("Memory for TME opt file is not available\n");
ret = -ENOMEM; ret = -ENOMEM;
goto out; goto out;