Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1304381 > unrolled thread

RE: [PATCH] megaraid:Fix possible NULL pointer deference in mraid_mm_ioctl

Back to article view | Back to linux.kernel

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  RE: [PATCH] megaraid:Fix possible NULL pointer deference in mraid_mm_ioctl Sumit Saxena <sumit.saxena@avagotech.com> - 2016-01-08 12:10 +0100

#1304381 — RE: [PATCH] megaraid:Fix possible NULL pointer deference in mraid_mm_ioctl

> -----Original Message-----
> From: Nicholas Krause [mailto:xerofoify@gmail.com]
> Sent: Wednesday, January 06, 2016 1:03 AM
> To: kashyap.desai@avagotech.com
> Cc: sumit.saxena@avagotech.com; uday.lingala@avagotech.com;
> JBottomley@odin.com; martin.petersen@oracle.com;
> megaraidlinux.pdl@avagotech.com; linux-scsi@vger.kernel.org; linux-
> kernel@vger.kernel.org
> Subject: [PATCH] megaraid:Fix possible NULL pointer deference in
> mraid_mm_ioctl
>
> This adds the needed check after the call to the function
mraid_mm_alloc_kioc
> in order to make sure that this function has not returned NULL and
therefore
> makes sure we do not deference a NULL pointer if one is returned by
> mraid_mm_alloc_kioc.
> Further more add needed comments explaining that this function call can
return
> NULL if the list head is empty for the pointer passed in order to allow
furture
> users to understand this required pointer check.
>
> Signed-off-by: Nicholas Krause <xerofoify@gmail.com>
> ---
>  drivers/scsi/megaraid/megaraid_mm.c | 4 ++++
>  1 file changed, 4 insertions(+)
>
> diff --git a/drivers/scsi/megaraid/megaraid_mm.c
> b/drivers/scsi/megaraid/megaraid_mm.c
> index a706927..215ddbc 100644
> --- a/drivers/scsi/megaraid/megaraid_mm.c
> +++ b/drivers/scsi/megaraid/megaraid_mm.c
> @@ -179,8 +179,12 @@ mraid_mm_ioctl(struct file *filep, unsigned int
cmd,
> unsigned long arg)
>
>  	/*
>  	 * The following call will block till a kioc is available
> +	 * or return NULL if the list head is empty for the pointer
> +	 * of type mraid_mmapt passed to mraid_mm_alloc_kioc
>  	 */
>  	kioc = mraid_mm_alloc_kioc(adp);
> +	if (!kioc)
> +		return -ENXIO;
>
>  	/*
>  	 * User sent the old mimd_t ioctl packet. Convert it to uioc_t.

Acked-by: Sumit Saxena <sumit.saxena@avagotech.com>

> --
> 2.5.0

[toc] | [standalone]

Back to top | Article view | linux.kernel

csiph-web