diff options
author | Jia-Ju Bai <baijiaju1990@gmail.com> | 2019-07-24 05:46:58 +0300 |
---|---|---|
committer | Richard Weinberger <richard@nod.at> | 2019-09-15 23:42:10 +0300 |
commit | f2538f999345405f7d2e1194c0c8efa4e11f7b3a (patch) | |
tree | 3d7558b9a985024eb9eb80cda548153d5f89c858 /fs/jffs2/fs.c | |
parent | e46131b9fd31155a552dea598e7d915b64c5c04c (diff) | |
download | linux-f2538f999345405f7d2e1194c0c8efa4e11f7b3a.tar.xz |
jffs2: Fix possible null-pointer dereferences in jffs2_add_frag_to_fragtree()
In jffs2_add_frag_to_fragtree(), there is an if statement on line 223 to
check whether "this" is NULL:
if (this)
When "this" is NULL, it is used at several places, such as on line 249:
if (this->node)
and on line 260:
if (newfrag->ofs > this->ofs)
Thus possible null-pointer dereferences may occur.
To fix these bugs, -EINVAL is returned when "this" is NULL.
These bugs are found by a static analysis tool STCheck written by us.
Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Diffstat (limited to 'fs/jffs2/fs.c')
0 files changed, 0 insertions, 0 deletions