From: Carlo Caione <[email protected]> In the rfkill_gpio code the variable type_name is not initialized and it can point to a spurious memory location. When device_property_read_string is not able to locate the string we are passing to rfkill_find_type this random pointer, causing a NULL pointer dereference when using strcmp.
Signed-off-by: Carlo Caione <[email protected]> --- net/rfkill/rfkill-gpio.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/rfkill/rfkill-gpio.c b/net/rfkill/rfkill-gpio.c index 41bd496531d4..659d2edae972 100644 --- a/net/rfkill/rfkill-gpio.c +++ b/net/rfkill/rfkill-gpio.c @@ -88,7 +88,7 @@ static int rfkill_gpio_probe(struct platform_device *pdev) { struct rfkill_gpio_data *rfkill; struct gpio_desc *gpio; - const char *type_name; + const char *type_name = NULL; int ret; rfkill = devm_kzalloc(&pdev->dev, sizeof(*rfkill), GFP_KERNEL); -- 2.14.1
