Commit eb9deadc authored Dec 09, 2017 by Zhen Kong

qseecom: fix an issue when requested listener svc id does not exist



When listener svc id does not exist, the listener svc entry pointer
is actually invalid, and should be set to NULL to avoid invalid pointer
deference on cache operation when sending listener resp to TZ.

Change-Id: I6af0c7405c9dc5dfe481396979023968a8324dd0
Signed-off-by: Zhen Kong <zkong@codeaurora.org>

parent 038b5bef

drivers/misc/qseecom.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1733,7 +1733,7 @@ static int __qseecom_process_incomplete_cmd(struct qseecom_dev_handle *data,
		if (ptr_svc->svc.listener_id != lstnr) {
		pr_warn("Service requested does not exist\n");
		__qseecom_qseos_fail_return_resp_tz(data, resp,
		&send_data_rsp, ptr_svc, lstnr);
		&send_data_rsp, NULL, lstnr);
		return -ERESTARTSYS;
		}
		pr_debug("waking up rcv_req_wq and waiting for send_resp_wq\n");