diff options
| author | Vipin Deep Kaur <vkaur@codeaurora.org> | 2018-10-08 17:08:43 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-10-22 23:39:56 -0700 |
| commit | eb97388a6a9f6ec1ab6b0b86bd0af2ba8c9cb9ab (patch) | |
| tree | 57a2ccbf49b77e16d2aaa22af6c7507b8f8b758e | |
| parent | dd0b76da71857f2055e770adc5371bdf49a143af (diff) | |
i2c-msm-v2: Handle Null pointer de-referenceLE.UM.2.3.7-07700-sda845.0LE.UM.2.3.7-07600-sda845.0
Zero message may be passed causing null pointer de-reference.
Adding check on the number of messages passed to handle the issue.
Change-Id: I7cef6dd2070c5eaaa748698c45540f8aa1d96116
Signed-off-by: Vipin Deep Kaur <vkaur@codeaurora.org>
| -rw-r--r-- | drivers/i2c/busses/i2c-msm-v2.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/drivers/i2c/busses/i2c-msm-v2.c b/drivers/i2c/busses/i2c-msm-v2.c index 99e7c97e2000..631169b4081d 100644 --- a/drivers/i2c/busses/i2c-msm-v2.c +++ b/drivers/i2c/busses/i2c-msm-v2.c @@ -2321,6 +2321,12 @@ i2c_msm_frmwrk_xfer(struct i2c_adapter *adap, struct i2c_msg msgs[], int num) struct i2c_msm_ctrl *ctrl = i2c_get_adapdata(adap); struct i2c_msm_xfer *xfer = &ctrl->xfer; + if (num < 1) { + dev_err(ctrl->dev, + "error on number of msgs(%d) received\n", num); + return -EINVAL; + } + if (IS_ERR_OR_NULL(msgs)) { dev_err(ctrl->dev, " error on msgs Accessing invalid pointer location\n"); return PTR_ERR(msgs); |