From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6726C1366 for ; Tue, 17 May 2022 10:23:53 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 2DDF8C385B8; Tue, 17 May 2022 10:23:50 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1652783033; bh=rReOvOmhDEHjFGqHgf89jVP6b2wbvBVISjGbIlFVMfU=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=ax+B0LvHN+fGTU2qRbOnMAeBdyPtqmbOWfX91NMKl4fyZ30ALqFs/H4jGul7dNMsH Giy0aYr0b7toT8SaD8XiFejt3j8hpPGPX2kKHCVqiM0QALP6zwBGLCjp7WlZFO+OBa 32lZwWUakuJ4cNHG9qOqvnO9Hdtz9Uo0eBy/AtHQ= Date: Tue, 17 May 2022 12:23:46 +0200 From: Greg KH To: Yuanjun Gong Cc: Benson Leung , chrome-platform@lists.linux.dev, linux-kernel@vger.kernel.org, stable@vger.kernel.org Subject: Re: [PATCH 1/1] platform/chrome: check *dest of memcpy Message-ID: References: <20220517095521.6897-1-ruc_gongyuanjun@163.com> Precedence: bulk X-Mailing-List: chrome-platform@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20220517095521.6897-1-ruc_gongyuanjun@163.com> On Tue, May 17, 2022 at 05:55:21PM +0800, Yuanjun Gong wrote: > From: Gong Yuanjun > > In regulator/cros-ec-regulator.c, cros_ec_cmd is sometimes called > with *indata set to NULL. > > static int cros_ec_regulator_enable(struct regulator_dev *dev){ > ... > cros_ec_cmd(data->ec_dev, 0, EC_CMD_REGULATOR_ENABLE, &cmd, > sizeof(cmd), NULL, 0) > ...} > > Don't do memcpy if indata is NULL. > > Signed-off-by: Gong Yuanjun > --- > drivers/platform/chrome/cros_ec_proto.c | 2 +- > drivers/regulator/cros-ec-regulator.c | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) > > diff --git a/drivers/platform/chrome/cros_ec_proto.c b/drivers/platform/chrome/cros_ec_proto.c > index c4caf2e2de82..da175c57cff7 100644 > --- a/drivers/platform/chrome/cros_ec_proto.c > +++ b/drivers/platform/chrome/cros_ec_proto.c > @@ -938,7 +938,7 @@ int cros_ec_command(struct cros_ec_device *ec_dev, > if (ret < 0) > goto error; > > - if (insize) > + if (indata && insize) > memcpy(indata, msg->data, insize); > error: > kfree(msg); > diff --git a/drivers/regulator/cros-ec-regulator.c b/drivers/regulator/cros-ec-regulator.c > index c4754f3cf233..1c7ff085e492 100644 > --- a/drivers/regulator/cros-ec-regulator.c > +++ b/drivers/regulator/cros-ec-regulator.c > @@ -44,7 +44,7 @@ static int cros_ec_cmd(struct cros_ec_device *ec, u32 version, u32 command, > if (ret < 0) > goto cleanup; > > - if (insize) > + if (indata && insize) > memcpy(indata, msg->data, insize); > > cleanup: > -- > 2.17.1 > This is not the correct way to submit patches for inclusion in the stable kernel tree. Please read: https://www.kernel.org/doc/html/latest/process/stable-kernel-rules.html for how to do this properly.