Received-SPF: pass (google.com: domain of linux-kernel+bounces-207019-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) client-ip=2604:1380:45e3:2400::1;
Date: Sat, 8 Jun 2024 13:39:22 +0200
From: Greg KH <gregkh@linuxfoundation.org>
To: "Ivan T. Ivanov" <iivanov@suse.de>
Cc: cve@kernel.org, linux-cve-announce@vger.kernel.org,
	linux-kernel@vger.kernel.org
Subject: Re: iio: adc: stm32-adc: harden against NULL pointer deref in
 stm32_adc_probe()
Message-ID: <2024060807-quintet-pogo-3c8f@gregkh>
References: <2024052159-CVE-2023-52802-81ce@gregkh>
 <20240605145123.78220-1-iivanov@suse.de>
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20240605145123.78220-1-iivanov@suse.de>

On Wed, Jun 05, 2024 at 05:51:23PM +0300, Ivan T. Ivanov wrote:
> Hi,
> 
> I could we drop this CVE? 
> 
> of_match_device() can not return NULL in this case.
> 
> Even commit message agree on this:
> 
> " ... In practice there is no known reasonable way to trigger this, but
> in case one is added in future, harden the code by adding the check ..."

Ugh, our fault, sorry about that, now rejected.

Thanks again for the review!

greg k-h