https://github.com/torvalds/linux
Revision dd4d747ef05addab887dc8ff0d6ab9860bbcd783 authored by Nadezda Lutovinova on 21 September 2021, 15:51:53 UTC, committed by Guenter Roeck on 02 October 2021, 12:14:11 UTC
If driver read tmp value sufficient for
(tmp & 0x08) && (!(tmp & 0x80)) && ((tmp & 0x7) == ((tmp >> 4) & 0x7))
from device then Null pointer dereference occurs.
(It is possible if tmp = 0b0xyz1xyz, where same literals mean same numbers)
Also lm75[] does not serve a purpose anymore after switching to
devm_i2c_new_dummy_device() in w83791d_detect_subclients().

The patch fixes possible NULL pointer dereference by removing lm75[].

Found by Linux Driver Verification project (linuxtesting.org).

Cc: stable@vger.kernel.org
Signed-off-by: Nadezda Lutovinova <lutovinova@ispras.ru>
Link: https://lore.kernel.org/r/20210921155153.28098-3-lutovinova@ispras.ru
[groeck: Dropped unnecessary continuation lines, fixed multi-line alignments]
Signed-off-by: Guenter Roeck <linux@roeck-us.net>
1 parent 0f36b88
History
Tip revision: dd4d747ef05addab887dc8ff0d6ab9860bbcd783 authored by Nadezda Lutovinova on 21 September 2021, 15:51:53 UTC
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
Tip revision: dd4d747
File Mode Size
genheaders
mdp
Makefile -rw-r--r-- 67 bytes
README -rw-r--r-- 107 bytes
install_policy.sh -rwxr-xr-x 2.3 KB

README

back to top