diff options
author | Jesper Juhl | 2011-01-17 11:24:57 +0100 |
---|---|---|
committer | David S. Miller | 2011-01-19 01:13:49 +0100 |
commit | 1956cc52e73984a39252994f0beee458fc0d8909 (patch) | |
tree | aac01b12ee07ed2f5dd03ffdd77daee08ef85461 /drivers/net/usb | |
parent | ipv6: Silence privacy extensions initialization (diff) | |
download | kernel-qcow2-linux-1956cc52e73984a39252994f0beee458fc0d8909.tar.gz kernel-qcow2-linux-1956cc52e73984a39252994f0beee458fc0d8909.tar.xz kernel-qcow2-linux-1956cc52e73984a39252994f0beee458fc0d8909.zip |
ns83820: Avoid bad pointer deref in ns83820_init_one().
In drivers/net/ns83820.c::ns83820_init_one() we dynamically allocate
memory via alloc_etherdev(). We then call PRIV() on the returned storage
which is 'return netdev_priv()'. netdev_priv() takes the pointer it is
passed and adds 'ALIGN(sizeof(struct net_device), NETDEV_ALIGN)' to it and
returns it. Then we test the resulting pointer for NULL, which it is
unlikely to be at this point, and later dereference it. This will go bad
if alloc_etherdev() actually returned NULL.
This patch reworks the code slightly so that we test for a NULL pointer
(and return -ENOMEM) directly after calling alloc_etherdev().
Signed-off-by: Jesper Juhl <jj@chaosbits.net>
Signed-off-by: Benjamin LaHaise <bcrl@kvack.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/usb')
0 files changed, 0 insertions, 0 deletions