2.6.35-longterm review patch. If anyone has any objections, please let me know.
------------------ From: Ken Mills <[email protected]> commit 093d804611b9a38fe59753b37c29f840518406a9 upstream. gsm_data_alloc buffer allocation could fail and it is not being checked. Add check for allocated buffer and return if the buffer allocation fails. Signed-off-by: Ken Mills <[email protected]> Signed-off-by: Alan Cox <[email protected]> Signed-off-by: Greg Kroah-Hartman <[email protected]> Signed-off-by: Andi Kleen <[email protected]> --- drivers/char/n_gsm.c | 2 ++ 1 file changed, 2 insertions(+) Index: linux-2.6.35.y/drivers/char/n_gsm.c =================================================================== --- linux-2.6.35.y.orig/drivers/char/n_gsm.c +++ linux-2.6.35.y/drivers/char/n_gsm.c @@ -969,6 +969,8 @@ static void gsm_control_reply(struct gsm { struct gsm_msg *msg; msg = gsm_data_alloc(gsm, 0, dlen + 2, gsm->ftype); + if (msg == NULL) + return; msg->data[0] = (cmd & 0xFE) << 1 | EA; /* Clear C/R */ msg->data[1] = (dlen << 1) | EA; memcpy(msg->data + 2, data, dlen); _______________________________________________ stable mailing list [email protected] http://linux.kernel.org/mailman/listinfo/stable
