tty: ipwireless: fix missing checks for ioremap
authorKangjie Lu <kjlu@umn.edu>
Fri, 15 Mar 2019 07:07:12 +0000 (02:07 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 31 May 2019 13:46:30 +0000 (06:46 -0700)
[ Upstream commit 1bbb1c318cd8a3a39e8c3e2e83d5e90542d6c3e3 ]

ipw->attr_memory and ipw->common_memory are assigned with the
return value of ioremap. ioremap may fail, but no checks
are enforced. The fix inserts the checks to avoid potential
NULL pointer dereferences.

Signed-off-by: Kangjie Lu <kjlu@umn.edu>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/tty/ipwireless/main.c

index 3475e84..4c18bbf 100644 (file)
@@ -114,6 +114,10 @@ static int ipwireless_probe(struct pcmcia_device *p_dev, void *priv_data)
 
        ipw->common_memory = ioremap(p_dev->resource[2]->start,
                                resource_size(p_dev->resource[2]));
+       if (!ipw->common_memory) {
+               ret = -ENOMEM;
+               goto exit1;
+       }
        if (!request_mem_region(p_dev->resource[2]->start,
                                resource_size(p_dev->resource[2]),
                                IPWIRELESS_PCCARD_NAME)) {
@@ -134,6 +138,10 @@ static int ipwireless_probe(struct pcmcia_device *p_dev, void *priv_data)
 
        ipw->attr_memory = ioremap(p_dev->resource[3]->start,
                                resource_size(p_dev->resource[3]));
+       if (!ipw->attr_memory) {
+               ret = -ENOMEM;
+               goto exit3;
+       }
        if (!request_mem_region(p_dev->resource[3]->start,
                                resource_size(p_dev->resource[3]),
                                IPWIRELESS_PCCARD_NAME)) {