Patch "thermal: int340x: Check for NULL after calling kmemdup()" has been added to the 5.10-stable tree

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a note to let you know that I've just added the patch titled

    thermal: int340x: Check for NULL after calling kmemdup()

to the 5.10-stable tree which can be found at:
    http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     thermal-int340x-check-for-null-after-calling-kmemdup.patch
and it can be found in the queue-5.10 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.



commit 1008e7ab3aaf3af9df860957a3f1cf036261e84d
Author: Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
Date:   Wed Jan 26 09:48:53 2022 +0800

    thermal: int340x: Check for NULL after calling kmemdup()
    
    [ Upstream commit 38b16d6cfe54c820848bcfc999bc5e8a7da1cefb ]
    
    As the potential failure of the allocation, kmemdup() may return NULL.
    
    Then, 'bin_attr_data_vault.private' will be NULL, but
    'bin_attr_data_vault.size' is not 0, which is not consistent.
    
    Therefore, it is better to check the return value of kmemdup() to
    avoid the confusion.
    
    Fixes: 0ba13c763aac ("thermal/int340x_thermal: Export GDDV")
    Signed-off-by: Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
    [ rjw: Subject and changelog edits ]
    Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    Signed-off-by: Sasha Levin <sashal@xxxxxxxxxx>

diff --git a/drivers/thermal/intel/int340x_thermal/int3400_thermal.c b/drivers/thermal/intel/int340x_thermal/int3400_thermal.c
index 793d7b58fc65..55f5bc7cd20b 100644
--- a/drivers/thermal/intel/int340x_thermal/int3400_thermal.c
+++ b/drivers/thermal/intel/int340x_thermal/int3400_thermal.c
@@ -466,6 +466,11 @@ static void int3400_setup_gddv(struct int3400_thermal_priv *priv)
 	priv->data_vault = kmemdup(obj->package.elements[0].buffer.pointer,
 				   obj->package.elements[0].buffer.length,
 				   GFP_KERNEL);
+	if (!priv->data_vault) {
+		kfree(buffer.pointer);
+		return;
+	}
+
 	bin_attr_data_vault.private = priv->data_vault;
 	bin_attr_data_vault.size = obj->package.elements[0].buffer.length;
 	kfree(buffer.pointer);



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]

  Powered by Linux