* [PATCH] i2c: cp2615: handle allocation failure
@ 2026-08-16 16:17 Triet Hoang
0 siblings, 0 replies; only message in thread
From: Triet Hoang @ 2026-08-16 16:17 UTC (permalink / raw)
To: bence98; +Cc: andi.shyti, linux-i2c, linux-kernel, Triet Hoang
Check the result of kzalloc_obj() before dereferencing the allocated
message structure.
Signed-off-by: Triet Hoang <triet.hoang.dev@gmail.com>
---
drivers/i2c/busses/i2c-cp2615.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/drivers/i2c/busses/i2c-cp2615.c b/drivers/i2c/busses/i2c-cp2615.c
index 951de6249..178a35d0b 100644
--- a/drivers/i2c/busses/i2c-cp2615.c
+++ b/drivers/i2c/busses/i2c-cp2615.c
@@ -125,6 +125,9 @@ static int
cp2615_i2c_send(struct usb_interface *usbif, struct cp2615_i2c_transfer *i2c_w)
{
struct cp2615_iop_msg *msg = kzalloc_obj(*msg);
+ if (!msg)
+ return -ENOMEM;
+
struct usb_device *usbdev = interface_to_usbdev(usbif);
int res = cp2615_init_i2c_msg(msg, i2c_w);
@@ -172,6 +175,9 @@ cp2615_i2c_recv(struct usb_interface *usbif, unsigned char tag, void *buf)
static int cp2615_check_iop(struct usb_interface *usbif)
{
struct cp2615_iop_msg *msg = kzalloc_obj(*msg);
+ if (!msg)
+ return -ENOMEM;
+
struct cp2615_iop_accessory_info *info = (struct cp2615_iop_accessory_info *)&msg->data;
struct usb_device *usbdev = interface_to_usbdev(usbif);
int res = cp2615_init_iop_msg(msg, iop_GetAccessoryInfo, NULL, 0);
--
2.53.0
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-16 16:18 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-16 16:17 [PATCH] i2c: cp2615: handle allocation failure Triet Hoang
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox