diff options
author | Ian Abbott <abbotti@mev.co.uk> | 2013-02-27 10:56:19 (GMT) |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2013-03-03 22:03:39 (GMT) |
commit | 9cb9a5913b9217b8ac94d06905a8a27afe3ea0a2 (patch) | |
tree | f287a9f94822c12d3347e44b41c98963c134c037 /net/tipc | |
parent | 30f3a0a711a2d86050c333b3cd2128fc8e0787f7 (diff) | |
download | linux-fsl-qoriq-9cb9a5913b9217b8ac94d06905a8a27afe3ea0a2.tar.xz |
staging: comedi: check s->async for poll(), read() and write()
commit cc400e185c07c15a42d2635995f422de5b94b696 upstream.
Some low-level comedi drivers (incorrectly) point `dev->read_subdev` or
`dev->write_subdev` to a subdevice that does not support asynchronous
commands. Comedi's poll(), read() and write() file operation handlers
assume these subdevices do support asynchronous commands. In
particular, they assume `s->async` is valid (where `s` points to the
read or write subdevice), which it won't be if it has been set
incorrectly. This can lead to a NULL pointer dereference.
Check `s->async` is non-NULL in `comedi_poll()`, `comedi_read()` and
`comedi_write()` to avoid the bug.
Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'net/tipc')
0 files changed, 0 insertions, 0 deletions