diff options
author | Colin Ian King <colin.king@canonical.com> | 2013-10-28 16:58:12 +0400 |
---|---|---|
committer | John W. Linville <linville@tuxdriver.com> | 2013-11-11 23:38:58 +0400 |
commit | 450991fd2f9d362562c69b2e70832b2ecb7624cb (patch) | |
tree | 6a476e9d713a987c4ec7af8182c82cb832e88cdd /drivers/net/wireless/libertas | |
parent | 01c85adfff5a8462aeea70796314c39dab1d9cc2 (diff) | |
download | linux-450991fd2f9d362562c69b2e70832b2ecb7624cb.tar.xz |
rtlwifi: fix null dereference on efuse_word on kmalloc fail returns NULL
kmalloc on efuse_word can return null, leading to free'ing of
elements in efuse_word on the error exit path even though it has not
been allocated. Instead, don't free the elements of efuse_word if
kmalloc failed.
Also, kmalloc of any of the arrays in efuse_word[] can also fail,
leading to undefined contents in the remaining elements leading to
problems when free'ing these elements later on. So kzalloc efuse_word
to ensure the kfree on the remaining elements won't cause breakage.
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless/libertas')
0 files changed, 0 insertions, 0 deletions