summaryrefslogtreecommitdiffstats
path: root/drivers/usb
diff options
context:
space:
mode:
authorChunfeng Yun <chunfeng.yun@mediatek.com>2016-04-28 05:42:20 +0200
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2016-04-28 21:35:36 +0200
commitf5e6253fe6de35fc2fa059974dbd9d61f32e4cd0 (patch)
treef2aea215554ff4c40edde5f7ebe807c2ce60d636 /drivers/usb
parentusbip: vudc: fix Kconfig dependencies (diff)
downloadlinux-f5e6253fe6de35fc2fa059974dbd9d61f32e4cd0.tar.xz
linux-f5e6253fe6de35fc2fa059974dbd9d61f32e4cd0.zip
usb: core: buffer: avoid NULL pointer dereferrence
NULL pointer dereferrence will happen when class driver wants to allocate zero length buffer and pool_max[0] can't be used, so simply returns NULL in the case. Signed-off-by: Chunfeng Yun <chunfeng.yun@mediatek.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb')
-rw-r--r--drivers/usb/core/buffer.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/usb/core/buffer.c b/drivers/usb/core/buffer.c
index 2741566ee4f2..98e39f91723a 100644
--- a/drivers/usb/core/buffer.c
+++ b/drivers/usb/core/buffer.c
@@ -122,6 +122,9 @@ void *hcd_buffer_alloc(
struct usb_hcd *hcd = bus_to_hcd(bus);
int i;
+ if (size == 0)
+ return NULL;
+
/* some USB hosts just use PIO */
if (!IS_ENABLED(CONFIG_HAS_DMA) ||
(!bus->controller->dma_mask &&