From 53d41a76e1e31468dfa6035d9620ffc4c0512a2f Mon Sep 17 00:00:00 2001 From: Vipin Deep Kaur Date: Mon, 8 Oct 2018 17:08:43 +0530 Subject: [PATCH] i2c-msm-v2: Handle Null pointer de-reference Zero message may be passed causing null pointer de-reference. Adding check on the number of messages passed to handle the issue. Change-Id: I7cef6dd2070c5eaaa748698c45540f8aa1d96116 Signed-off-by: Vipin Deep Kaur --- drivers/i2c/busses/i2c-msm-v2.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/drivers/i2c/busses/i2c-msm-v2.c b/drivers/i2c/busses/i2c-msm-v2.c index d72953f2df23..198e55829226 100644 --- a/drivers/i2c/busses/i2c-msm-v2.c +++ b/drivers/i2c/busses/i2c-msm-v2.c @@ -2330,6 +2330,12 @@ i2c_msm_frmwrk_xfer(struct i2c_adapter *adap, struct i2c_msg msgs[], int num) struct i2c_msm_ctrl *ctrl = i2c_get_adapdata(adap); struct i2c_msm_xfer *xfer = &ctrl->xfer; + if (num < 1) { + dev_err(ctrl->dev, + "error on number of msgs(%d) received\n", num); + return -EINVAL; + } + if (IS_ERR_OR_NULL(msgs)) { dev_err(ctrl->dev, " error on msgs Accessing invalid pointer location\n"); return PTR_ERR(msgs);