diff options
| author | Eric Sesterhenn <snakebyte@gmx.de> | 2006-10-10 23:45:45 +0200 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2006-10-17 02:09:48 +0200 |
| commit | 683f8c9e00d2aa911382186ca891bd221efaea74 (patch) | |
| tree | fd93a36b300ed8ce9025b09624333c839375c932 /drivers | |
| parent | [PATCH] orinoco: fix WE-21 buffer overflow (diff) | |
| download | linux-683f8c9e00d2aa911382186ca891bd221efaea74.tar.xz linux-683f8c9e00d2aa911382186ca891bd221efaea74.zip | |
[PATCH] zd1201: Possible NULL dereference
If we enter the if(!zd) and set free to 1, we dereference zd in the exit
code.
Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/net/wireless/zd1201.c | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/drivers/net/wireless/zd1201.c b/drivers/net/wireless/zd1201.c index 30057a335a7b..36b29ff05814 100644 --- a/drivers/net/wireless/zd1201.c +++ b/drivers/net/wireless/zd1201.c @@ -193,10 +193,8 @@ static void zd1201_usbrx(struct urb *urb) struct sk_buff *skb; unsigned char type; - if (!zd) { - free = 1; - goto exit; - } + if (!zd) + return; switch(urb->status) { case -EILSEQ: |