diff options
| author | Vipin Deep Kaur <vkaur@codeaurora.org> | 2018-10-08 17:08:43 +0530 |
|---|---|---|
| committer | Vipin Deep Kaur <vkaur@codeaurora.org> | 2018-10-08 17:22:47 +0530 |
| commit | 5d1bbf389c51de5bc3e7754a63da24f965b841ff (patch) | |
| tree | ddb235a590521f0cf7a1134cbe6ca9b22a2b4b49 | |
| parent | 3b8fc0b7a3fcc809378d82dbf66b417e186af205 (diff) | |
i2c-msm-v2: Handle Null pointer de-reference
Zero message may be passed causing null pointer de-reference.
Adding check on the number of messages passed to handle the issue.
Change-Id: I7cef6dd2070c5eaaa748698c45540f8aa1d96116
Signed-off-by: Vipin Deep Kaur <vkaur@codeaurora.org>
| -rw-r--r-- | drivers/i2c/busses/i2c-msm-v2.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/drivers/i2c/busses/i2c-msm-v2.c b/drivers/i2c/busses/i2c-msm-v2.c index d72953f2df23..198e55829226 100644 --- a/drivers/i2c/busses/i2c-msm-v2.c +++ b/drivers/i2c/busses/i2c-msm-v2.c @@ -2330,6 +2330,12 @@ i2c_msm_frmwrk_xfer(struct i2c_adapter *adap, struct i2c_msg msgs[], int num) struct i2c_msm_ctrl *ctrl = i2c_get_adapdata(adap); struct i2c_msm_xfer *xfer = &ctrl->xfer; + if (num < 1) { + dev_err(ctrl->dev, + "error on number of msgs(%d) received\n", num); + return -EINVAL; + } + if (IS_ERR_OR_NULL(msgs)) { dev_err(ctrl->dev, " error on msgs Accessing invalid pointer location\n"); return PTR_ERR(msgs); |