Commit 3fd14ebc authored May 20, 2019 by Quentin Deslandes Committed by Greg Kroah-Hartman May 21, 2019

staging: vt6656: fix potential NULL pointer dereference

vnt_free_tx_bufs() relies on priv->tx_context elements to be NULL if
they are not initialized (as vnt_free_rx_bufs() does). Add a check to
these elements in order to avoid NULL pointer dereference.

Signed-off-by: Quentin Deslandes <quentin.deslandes@itdev.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent a7bfc177

drivers/staging/vt6656/main_usb.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -363,6 +363,9 @@ static void vnt_free_tx_bufs(struct vnt_private *priv)

		for (ii = 0; ii < priv->num_tx_context; ii++) {
		tx_context = priv->tx_context[ii];
		if (!tx_context)
		continue;

		/* deallocate URBs */
		if (tx_context->urb) {
		usb_kill_urb(tx_context->urb);