From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752544Ab2GTLbN (ORCPT ); Fri, 20 Jul 2012 07:31:13 -0400 Received: from rcsinet15.oracle.com ([148.87.113.117]:26001 "EHLO rcsinet15.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751106Ab2GTLbL (ORCPT ); Fri, 20 Jul 2012 07:31:11 -0400 Date: Fri, 20 Jul 2012 14:30:57 +0300 From: Dan Carpenter To: Hannes Reinecke Cc: "James E.J. Bottomley" , linux-scsi@vger.kernel.org, linux-kernel@vger.kernel.org, kernel-janitors@vger.kernel.org Subject: [patch] [SCSI] aic79xx: NULL dereference in debug code Message-ID: <20120720113057.GC22245@elgon.mountain> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.21 (2010-09-15) X-Source-IP: ucsinet21.oracle.com [156.151.31.93] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org "ahd" can be NULL here and it gets dereferenced inside the call to ahd_name(). Signed-off-by: Dan Carpenter diff --git a/drivers/scsi/aic7xxx/aic79xx_core.c b/drivers/scsi/aic7xxx/aic79xx_core.c index 25417d0..5db8925 100644 --- a/drivers/scsi/aic7xxx/aic79xx_core.c +++ b/drivers/scsi/aic7xxx/aic79xx_core.c @@ -6120,7 +6120,8 @@ ahd_alloc(void *platform_arg, char *name) #ifdef AHD_DEBUG if ((ahd_debug & AHD_SHOW_MEMORY) != 0) { printk("%s: scb size = 0x%x, hscb size = 0x%x\n", - ahd_name(ahd), (u_int)sizeof(struct scb), + ahd ? ahd_name(ahd) : "(null)", + (u_int)sizeof(struct scb), (u_int)sizeof(struct hardware_scb)); } #endif