diff options
| author | Nadezda Lutovinova <lutovinova@ispras.ru> | 2021-09-21 18:51:52 +0300 |
|---|---|---|
| committer | Guenter Roeck <linux@roeck-us.net> | 2021-10-02 15:12:05 +0300 |
| commit | 0f36b88173f028e372668ae040ab1a496834d278 (patch) | |
| tree | 033588a7998f8cfa373e64b3a25d0e95a188ebc6 /lib/fault-inject.c | |
| parent | 943c15ac1b84d378da26bba41c83c67e16499ac4 (diff) | |
| download | linux-0f36b88173f028e372668ae040ab1a496834d278.tar.xz | |
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
If driver read val value sufficient for
(val & 0x08) && (!(val & 0x80)) && ((val & 0x7) == ((val >> 4) & 0x7))
from device then Null pointer dereference occurs.
(It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers)
Also lm75[] does not serve a purpose anymore after switching to
devm_i2c_new_dummy_device() in w83791d_detect_subclients().
The patch fixes possible NULL pointer dereference by removing lm75[].
Found by Linux Driver Verification project (linuxtesting.org).
Cc: stable@vger.kernel.org
Signed-off-by: Nadezda Lutovinova <lutovinova@ispras.ru>
Link: https://lore.kernel.org/r/20210921155153.28098-2-lutovinova@ispras.ru
[groeck: Dropped unnecessary continuation lines, fixed multipline alignment]
Signed-off-by: Guenter Roeck <linux@roeck-us.net>
Diffstat (limited to 'lib/fault-inject.c')
0 files changed, 0 insertions, 0 deletions