This is an automatic generated email to let you know that the following patch 
were queued:

Subject: media: ti-vpe: cal: Fix a NULL pointer dereference in 
cal_ctx_v4l2_init_formats()
Author:  Zhou Qingyang <[email protected]>
Date:    Mon Jan 24 18:20:01 2022 +0100

In cal_ctx_v4l2_init_formats(), devm_kzalloc() is assigned to
ctx->active_fmt and there is a dereference of it after that, which could
lead to NULL pointer dereference on failure of devm_kzalloc().

Fix this bug by adding a NULL check of ctx->active_fmt.

This bug was found by a static analyzer.

Builds with 'make allyesconfig' show no new warnings, and our static
analyzer no longer warns about this code.

Fixes: 7168155002cf ("media: ti-vpe: cal: Move format handling to cal.c and 
expose helpers")
Signed-off-by: Zhou Qingyang <[email protected]>
Reviewed-by: Pratyush Yadav <[email protected]>
Signed-off-by: Laurent Pinchart <[email protected]>
Signed-off-by: Mauro Carvalho Chehab <[email protected]>

 drivers/media/platform/ti-vpe/cal-video.c | 3 +++
 1 file changed, 3 insertions(+)

---

diff --git a/drivers/media/platform/ti-vpe/cal-video.c 
b/drivers/media/platform/ti-vpe/cal-video.c
index 7799da1cc261..3e936a2ca36c 100644
--- a/drivers/media/platform/ti-vpe/cal-video.c
+++ b/drivers/media/platform/ti-vpe/cal-video.c
@@ -823,6 +823,9 @@ static int cal_ctx_v4l2_init_formats(struct cal_ctx *ctx)
        /* Enumerate sub device formats and enable all matching local formats */
        ctx->active_fmt = devm_kcalloc(ctx->cal->dev, cal_num_formats,
                                       sizeof(*ctx->active_fmt), GFP_KERNEL);
+       if (!ctx->active_fmt)
+               return -ENOMEM;
+
        ctx->num_active_fmt = 0;
 
        for (j = 0, i = 0; ; ++j) {

_______________________________________________
linuxtv-commits mailing list
[email protected]
https://www.linuxtv.org/cgi-bin/mailman/listinfo/linuxtv-commits

Reply via email to