diff options
| author | Chunfeng Yun <chunfeng.yun@mediatek.com> | 2016-04-28 06:42:20 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2016-04-28 22:35:36 +0300 |
| commit | f5e6253fe6de35fc2fa059974dbd9d61f32e4cd0 (patch) | |
| tree | f2aea215554ff4c40edde5f7ebe807c2ce60d636 /drivers/usb/core/buffer.c | |
| parent | b5a2a8ecb204c821f47b43ab7e93f408b0d085b1 (diff) | |
| download | linux-f5e6253fe6de35fc2fa059974dbd9d61f32e4cd0.tar.xz | |
usb: core: buffer: avoid NULL pointer dereferrence
NULL pointer dereferrence will happen when class driver
wants to allocate zero length buffer and pool_max[0]
can't be used, so simply returns NULL in the case.
Signed-off-by: Chunfeng Yun <chunfeng.yun@mediatek.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/core/buffer.c')
| -rw-r--r-- | drivers/usb/core/buffer.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/usb/core/buffer.c b/drivers/usb/core/buffer.c index 2741566ee4f2..98e39f91723a 100644 --- a/drivers/usb/core/buffer.c +++ b/drivers/usb/core/buffer.c @@ -122,6 +122,9 @@ void *hcd_buffer_alloc( struct usb_hcd *hcd = bus_to_hcd(bus); int i; + if (size == 0) + return NULL; + /* some USB hosts just use PIO */ if (!IS_ENABLED(CONFIG_HAS_DMA) || (!bus->controller->dma_mask && |