summaryrefslogtreecommitdiffstats
path: root/drivers
diff options
context:
space:
mode:
authorKhazhismel Kumykov <khazhy@chromium.org>2023-01-18 02:02:12 +0100
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2023-01-20 13:23:42 +0100
commita769b05eeed7accc4019a1ed9799dd72067f1ce8 (patch)
tree39d16a4e0eb076c77f63f7e778ceed3e9d55cb20 /drivers
parentmisc: fastrpc: Fix use-after-free race condition for maps (diff)
downloadlinux-a769b05eeed7accc4019a1ed9799dd72067f1ce8.tar.xz
linux-a769b05eeed7accc4019a1ed9799dd72067f1ce8.zip
gsmi: fix null-deref in gsmi_get_variable
We can get EFI variables without fetching the attribute, so we must allow for that in gsmi. commit 859748255b43 ("efi: pstore: Omit efivars caching EFI varstore access layer") added a new get_variable call with attr=NULL, which triggers panic in gsmi. Fixes: 74c5b31c6618 ("driver: Google EFI SMI") Cc: stable <stable@kernel.org> Signed-off-by: Khazhismel Kumykov <khazhy@google.com> Link: https://lore.kernel.org/r/20230118010212.1268474-1-khazhy@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers')
-rw-r--r--drivers/firmware/google/gsmi.c7
1 files changed, 4 insertions, 3 deletions
diff --git a/drivers/firmware/google/gsmi.c b/drivers/firmware/google/gsmi.c
index 4e2575dfeb90..871bedf533a8 100644
--- a/drivers/firmware/google/gsmi.c
+++ b/drivers/firmware/google/gsmi.c
@@ -361,9 +361,10 @@ static efi_status_t gsmi_get_variable(efi_char16_t *name,
memcpy(data, gsmi_dev.data_buf->start, *data_size);
/* All variables are have the following attributes */
- *attr = EFI_VARIABLE_NON_VOLATILE |
- EFI_VARIABLE_BOOTSERVICE_ACCESS |
- EFI_VARIABLE_RUNTIME_ACCESS;
+ if (attr)
+ *attr = EFI_VARIABLE_NON_VOLATILE |
+ EFI_VARIABLE_BOOTSERVICE_ACCESS |
+ EFI_VARIABLE_RUNTIME_ACCESS;
}
spin_unlock_irqrestore(&gsmi_dev.lock, flags);