Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c9e44a1a authored by Ping-Ke Shih's avatar Ping-Ke Shih Committed by Greg Kroah-Hartman
Browse files

rtlwifi: fix potential NULL pointer dereference 



[ Upstream commit 60209d482b97743915883d293c8b85226d230c19 ]

In case dev_alloc_skb fails, the fix safely returns to avoid
potential NULL pointer dereference.

Signed-off-by: default avatarPing-Ke Shih <pkshih@realtek.com>
Signed-off-by: default avatarKalle Valo <kvalo@codeaurora.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent bd2ab045

drivers/net/wireless/realtek/rtlwifi/rtl8188ee/fw.c

+2 −0
Original line number Diff line number Diff line
@@ -622,6 +622,8 @@ void rtl88e_set_fw_rsvdpagepkt(struct ieee80211_hw *hw, bool b_dl_finished) 
		      u1rsvdpageloc, 3);



	skb = dev_alloc_skb(totalpacketlen);

	if (!skb)

		return;

	skb_put_data(skb, &reserved_page_packet, totalpacketlen);



	rtstatus = rtl_cmd_send_packet(hw, skb);

drivers/net/wireless/realtek/rtlwifi/rtl8192c/fw_common.c

+2 −0
Original line number Diff line number Diff line
@@ -646,6 +646,8 @@ void rtl92c_set_fw_rsvdpagepkt(struct ieee80211_hw *hw, 




	skb = dev_alloc_skb(totalpacketlen);

	if (!skb)

		return;

	skb_put_data(skb, &reserved_page_packet, totalpacketlen);



	if (cmd_send_packet)

drivers/net/wireless/realtek/rtlwifi/rtl8192ee/fw.c

+2 −0
Original line number Diff line number Diff line
@@ -766,6 +766,8 @@ void rtl92ee_set_fw_rsvdpagepkt(struct ieee80211_hw *hw, bool b_dl_finished) 
		      u1rsvdpageloc, 3);



	skb = dev_alloc_skb(totalpacketlen);

	if (!skb)

		return;

	skb_put_data(skb, &reserved_page_packet, totalpacketlen);



	rtstatus = rtl_cmd_send_packet(hw, skb);

drivers/net/wireless/realtek/rtlwifi/rtl8723ae/fw.c

+2 −0
Original line number Diff line number Diff line
@@ -470,6 +470,8 @@ void rtl8723e_set_fw_rsvdpagepkt(struct ieee80211_hw *hw, bool b_dl_finished) 
		      u1rsvdpageloc, 3);



	skb = dev_alloc_skb(totalpacketlen);

	if (!skb)

		return;

	skb_put_data(skb, &reserved_page_packet, totalpacketlen);



	rtstatus = rtl_cmd_send_packet(hw, skb);

drivers/net/wireless/realtek/rtlwifi/rtl8723be/fw.c

+2 −0
Original line number Diff line number Diff line
@@ -584,6 +584,8 @@ void rtl8723be_set_fw_rsvdpagepkt(struct ieee80211_hw *hw, 
		      u1rsvdpageloc, sizeof(u1rsvdpageloc));



	skb = dev_alloc_skb(totalpacketlen);

	if (!skb)

		return;

	skb_put_data(skb, &reserved_page_packet, totalpacketlen);



	rtstatus = rtl_cmd_send_packet(hw, skb);