Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 166c050b authored by Alexandre Bounine's avatar Alexandre Bounine Committed by Linus Torvalds
Browse files

RapidIO: fix potential null deref in rio_setup_device() 



The "goto cleanup" path can deference "rswitch" when it is NULL.

Reported-by: default avatarDan Carpenter <error27@gmail.com>
Signed-off-by: default avatarAlexandre Bounine <alexandre.bounine@idt.com>
Cc: Dan Carpenter <error27@gmail.com>
Cc: Kumar Gala <galak@kernel.crashing.org>
Cc: Matt Porter <mporter@kernel.crashing.org>
Cc: Chul Kim <chul.kim@idt.com>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
parent 48618fb4

drivers/rapidio/rio-scan.c

+1 −1
Original line number Diff line number Diff line
@@ -516,7 +516,7 @@ static struct rio_dev __devinit *rio_setup_device(struct rio_net *net, 
	return rdev;



cleanup:

	if (rio_is_switch(rdev))

	if (rswitch)

		kfree(rswitch->route_table);



	kfree(rdev);