From: Lukasz Majewski <l.majewski@samsung.com>
To: u-boot@lists.denx.de
Subject: [U-Boot] [Patch V2 2/3] gadget: f_thor: check pointers before use in download_tail()
Date: Tue, 16 Dec 2014 14:47:47 +0100 [thread overview]
Message-ID: <20141216144747.5ecb4596@amdc2363> (raw)
In-Reply-To: <1418636051-31901-2-git-send-email-p.marczak@samsung.com>
Hi Przemyslaw,
> Some pointers in function download_tail() were not checked
> before the use. This could possibly cause the data abort.
> To avoid this, check if the pointers are not null is added.
>
> Signed-off-by: Przemyslaw Marczak <p.marczak@samsung.com>
> ---
> Change v2:
> - download_tail(): change printf() to error()
> ---
> drivers/usb/gadget/f_thor.c | 16 ++++++++++++++--
> 1 file changed, 14 insertions(+), 2 deletions(-)
>
> diff --git a/drivers/usb/gadget/f_thor.c b/drivers/usb/gadget/f_thor.c
> index 78519fa..2d0410d 100644
> --- a/drivers/usb/gadget/f_thor.c
> +++ b/drivers/usb/gadget/f_thor.c
> @@ -205,12 +205,24 @@ static long long int download_head(unsigned
> long long total,
> static int download_tail(long long int left, int cnt)
> {
> - struct dfu_entity *dfu_entity =
> dfu_get_entity(alt_setting_num);
> - void *transfer_buffer = dfu_get_buf(dfu_entity);
> + struct dfu_entity *dfu_entity;
> + void *transfer_buffer;
> int ret;
>
> debug("%s: left: %llu cnt: %d\n", __func__, left, cnt);
>
> + dfu_entity = dfu_get_entity(alt_setting_num);
> + if (!dfu_entity) {
> + error("Alt setting: %d entity not found!\n",
> alt_setting_num);
> + return -ENOENT;
> + }
> +
> + transfer_buffer = dfu_get_buf(dfu_entity);
> + if (!transfer_buffer) {
> + error("Transfer buffer not allocated!");
> + return -ENXIO;
> + }
> +
> if (left) {
> ret = dfu_write(dfu_entity, transfer_buffer, left,
> cnt++); if (ret) {
Applied to u-boot-dfu, thanks!
--
Best regards,
Lukasz Majewski
Samsung R&D Institute Poland (SRPOL) | Linux Platform Group
next prev parent reply other threads:[~2014-12-16 13:47 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-12-11 11:02 [U-Boot] [PATCH 1/2] dfu: mmc: check if mmc device exists in mmc_block_op() Przemyslaw Marczak
2014-12-11 11:03 ` [U-Boot] [PATCH 2/2] gadget: f_thor: check pointers before use in download_tail() Przemyslaw Marczak
2014-12-12 8:38 ` Lukasz Majewski
2014-12-12 8:38 ` [U-Boot] [PATCH 1/2] dfu: mmc: check if mmc device exists in mmc_block_op() Lukasz Majewski
2014-12-15 9:34 ` [U-Boot] [Patch V2 1/3] " Przemyslaw Marczak
2014-12-15 9:34 ` [U-Boot] [Patch V2 2/3] gadget: f_thor: check pointers before use in download_tail() Przemyslaw Marczak
2014-12-16 13:47 ` Lukasz Majewski [this message]
2014-12-15 9:34 ` [U-Boot] [Patch V2 3/3] dfu: dfu_get_buf: check the value of env dfu_bufsiz before use Przemyslaw Marczak
2014-12-16 13:48 ` Lukasz Majewski
2014-12-16 15:09 ` Marek Vasut
2014-12-16 16:07 ` Lukasz Majewski
2014-12-16 17:01 ` Marek Vasut
2014-12-16 13:47 ` [U-Boot] [Patch V2 1/3] dfu: mmc: check if mmc device exists in mmc_block_op() Lukasz Majewski
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20141216144747.5ecb4596@amdc2363 \
--to=l.majewski@samsung.com \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.