Re: [PATCH] brcmfmac: Fix a NULL pointer dereference in brcmf_of_probe()

From: Arend van Spriel
Date: Wed Jan 26 2022 - 08:44:28 EST


On 1/24/2022 5:50 PM, 'Zhou Qingyang' via BRCM80211-DEV-LIST,PDL wrote:
In brcmf_of_probe(), the return value of devm_kzalloc() is assigned to
board_type and there is a dereference of it in strcpy() right after
that. devm_kzalloc() could return NULL on failure of allocation, which
could lead to NULL pointer dereference.

Fix this bug by adding a NULL check of board_type.

This bug was found by a static analyzer.

Builds with 'make allyesconfig' show no new warnings,
and our static analyzer no longer warns about this code

Thanks for this suggestion. However, this has been addressed already by this patch [1].

Regards,
Arend

[1] https://patchwork.kernel.org/project/linux-wireless/patch/20220117142919.207370-8-marcan@xxxxxxxxx/

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature