mirror of
https://github.com/followmsi/android_kernel_google_msm.git
synced 2024-11-06 23:17:41 +00:00
bc64aa3603
Fix the following NULL pointer dereferences in character drivers. Null pointer 'pra' that comes from line 825 may be passed to function and can be dereferenced there by passing argument 4 to function 'fastrpc_internal_invoke' at line 847. drivers/char/adsprpc.c +847 | fastrpc_device_ioctl() Null pointer 'rpra' that comes from line 672 may be passed to function and can be dereferenced there by passing argument 2 to function 'inv_args' at line 702. drivers/char/adsprpc.c +702 | fastrpc_internal_invoke() Constant NULL may be dereferenced by passing argument 3 to function 'diag_device_write' at line 165. drivers/char/diag/diagfwd_hsic.c +165 | diag_hsic_read_complete_callback() drivers/char/diag/diagfwd.c +585 | diag_device_write() Change-Id: I30469575c30f3846b449b6c71522f7dfc10c5bc5 Signed-off-by: Binoy Jayan <bjayan@codeaurora.org> |
||
|---|---|---|
| .. | ||
| diag_dci.c | ||
| diag_dci.h | ||
| diag_debugfs.c | ||
| diag_debugfs.h | ||
| diag_masks.c | ||
| diag_masks.h | ||
| diagchar.h | ||
| diagchar_core.c | ||
| diagchar_hdlc.c | ||
| diagchar_hdlc.h | ||
| diagfwd.c | ||
| diagfwd.h | ||
| diagfwd_bridge.c | ||
| diagfwd_bridge.h | ||
| diagfwd_cntl.c | ||
| diagfwd_cntl.h | ||
| diagfwd_hsic.c | ||
| diagfwd_hsic.h | ||
| diagfwd_sdio.c | ||
| diagfwd_sdio.h | ||
| diagfwd_smux.c | ||
| diagfwd_smux.h | ||
| diagmem.c | ||
| diagmem.h | ||
| Kconfig | ||
| Makefile | ||