Received: by 2002:a25:8b91:0:0:0:0:0 with SMTP id j17csp1753121ybl; Sat, 11 Jan 2020 02:07:33 -0800 (PST) X-Google-Smtp-Source: APXvYqw598/eEL3+a5RrngkjAKO8Q/UzPtl2G5MO0k0uz7iMMIqMiy7pDxk8ADQ4RAqvbyncQlc5 X-Received: by 2002:a05:6830:1294:: with SMTP id z20mr6125649otp.60.1578737253344; Sat, 11 Jan 2020 02:07:33 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1578737253; cv=none; d=google.com; s=arc-20160816; b=w9LLQ9F4HiK71DlbdqDrBkZ6MOaKagNhk0kj7ZK1fQU6daPDdrE/53OkEPkpmN6xBM se25JZt05Zh612+hMC0cjfTz4CvB6T8TRH5sAoJCz21HoQjcURZTuZBT7FtEcMNq7kbM BZ7zb+N+gx3r7P3Q+uqCYdK8+oHSYwERxTV0qTZf+FOhjPue+985UNDYM+77ALmh0GEy Z6JEIQOcFniYWCG55pW5zr9pq+io1dlOpxUXHEBC7Qnv9bOh/LB45QvvuOoQzP7egGSg FKCiaDxFihYSWyhQISa0QgJVEwhoBWg+PFoszCp74hyEbwOHAA4RX1L460UtVeCrNKnX +oxA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :user-agent:references:in-reply-to:message-id:date:subject:cc:to :from:dkim-signature; bh=W/MLeLahs8wH70baHlvAHMmstyBzO2Xo5w8FMP+3gRQ=; b=YZYxbIwZR//wKelyv6i3q5GdX0u/Wp/yyhFZ1rYze5s+hcE4WNt1h+jyWCsVOtL3GE HvGqTM90t7/wGtCxOc4fc5WFDrSMBUcoE7Wnk+pl/TRfDDhN+bQjyupWJ0Yb5pvJJURD UywKvYNjlq1mBnnfeTm1SGgvw2k/7YYReDxaA6sUPM1tGtSWRznT1xyssAUDATY8AQwy HmAY9wiiitwcDtsAOUVu7AudRNraIKeTtwVLWgpxTs0dYJjc6dk4vLsK4zpORfDejsWH EE289uDoL4wFssTVJPyE4mmNeOOOR3SDtA5420jP9DDjRn2xcQDL8PsvcZImij+BB2e/ gDWA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b=EpjXXVQG; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id j5si2666267oii.114.2020.01.11.02.07.22; Sat, 11 Jan 2020 02:07:33 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b=EpjXXVQG; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729217AbgAKKF2 (ORCPT + 99 others); Sat, 11 Jan 2020 05:05:28 -0500 Received: from mail.kernel.org ([198.145.29.99]:38548 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728850AbgAKKF1 (ORCPT ); Sat, 11 Jan 2020 05:05:27 -0500 Received: from localhost (unknown [62.119.166.9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id 707912082E; Sat, 11 Jan 2020 10:05:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1578737127; bh=m3YkXNtADal+FxT5+G8XsLoAk5H/L8pRwhFC/xDTCPA=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=EpjXXVQGwxPTmeJvkrRE/MHyDi9vhXdu57kzLm3vljOIxD/UQWf8ZsfDWGd8t4gWI lz9wMcrExTaf6JQdqZFojMYD2fP1RxEoqUNGgbIXGuSJxPOhAog1ojv0dZovDiIlQm tJ9GNTf376e28Ce/S93Ji8DZY9DgrwvxdHwZmmyQ= From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman , stable@vger.kernel.org, Aditya Pakki , Johannes Berg , Sasha Levin Subject: [PATCH 4.9 71/91] rfkill: Fix incorrect check to avoid NULL pointer dereference Date: Sat, 11 Jan 2020 10:50:04 +0100 Message-Id: <20200111094910.852061715@linuxfoundation.org> X-Mailer: git-send-email 2.24.1 In-Reply-To: <20200111094844.748507863@linuxfoundation.org> References: <20200111094844.748507863@linuxfoundation.org> User-Agent: quilt/0.66 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Aditya Pakki [ Upstream commit 6fc232db9e8cd50b9b83534de9cd91ace711b2d7 ] In rfkill_register, the struct rfkill pointer is first derefernced and then checked for NULL. This patch removes the BUG_ON and returns an error to the caller in case rfkill is NULL. Signed-off-by: Aditya Pakki Link: https://lore.kernel.org/r/20191215153409.21696-1-pakki001@umn.edu Signed-off-by: Johannes Berg Signed-off-by: Sasha Levin --- net/rfkill/core.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/net/rfkill/core.c b/net/rfkill/core.c index 884027f62783..87c35844d7d9 100644 --- a/net/rfkill/core.c +++ b/net/rfkill/core.c @@ -940,10 +940,13 @@ static void rfkill_sync_work(struct work_struct *work) int __must_check rfkill_register(struct rfkill *rfkill) { static unsigned long rfkill_no; - struct device *dev = &rfkill->dev; + struct device *dev; int error; - BUG_ON(!rfkill); + if (!rfkill) + return -EINVAL; + + dev = &rfkill->dev; mutex_lock(&rfkill_global_mutex); -- 2.20.1