Commit dd006fc4 authored Jul 08, 2019 by Yang Wei Committed by David S. Miller Jul 08, 2019

nfc: fix potential illegal memory access



The frags_q is not properly initialized, it may result in illegal memory
access when conn_info is NULL.
The "goto free_exit" should be replaced by "goto exit".

Signed-off-by: Yang Wei <albin_yang@163.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 4993e5b3

net/nfc/nci/data.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -107,7 +107,7 @@ static int nci_queue_tx_data_frags(struct nci_dev *ndev,
		conn_info = nci_get_conn_info_by_conn_id(ndev, conn_id);
		if (!conn_info) {
		rc = -EPROTO;
		goto free_exit;
		goto exit;
		}

		__skb_queue_head_init(&frags_q);