From patchwork Thu Mar 14 07:17:59 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kangjie Lu X-Patchwork-Id: 10852257 Return-Path: Received: from mail.wl.linuxfoundation.org (pdx-wl-mail.web.codeaurora.org [172.30.200.125]) by pdx-korg-patchwork-2.web.codeaurora.org (Postfix) with ESMTP id BFB9D13B5 for ; Thu, 14 Mar 2019 07:18:25 +0000 (UTC) Received: from mail.wl.linuxfoundation.org (localhost [127.0.0.1]) by mail.wl.linuxfoundation.org (Postfix) with ESMTP id 9FBE42A209 for ; Thu, 14 Mar 2019 07:18:25 +0000 (UTC) Received: by mail.wl.linuxfoundation.org (Postfix, from userid 486) id 92F242A20B; Thu, 14 Mar 2019 07:18:25 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on pdx-wl-mail.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=2.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.wl.linuxfoundation.org (Postfix) with ESMTPS id 3352F2A209 for ; Thu, 14 Mar 2019 07:18:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender: Content-Transfer-Encoding:Content-Type:MIME-Version:Cc:List-Subscribe: List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id:Message-Id:Date: Subject:To:From:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To: References:List-Owner; bh=/PFjQEYIPVkKre8pUaPPZ3ldBEMxIsZgI0bVxYE+86E=; b=c9R WYKWm/F3+anyE3sznRGUOf5ik1khQEHRqdjjwf+P1OEawUyn3K75Zjhn1RMCgd05kgoJDWwTyS+nL uJKt0s40ZUOiWzL6pSMqBwrFoHISHQgDs6GY23O0hHfa49JdsLJjCtqRGBbx1gAt9lWqrp1NTiqIz cbyGu8vJn67AvCLFwSCnXpRQxeXSxlc5RZ5ZdRerAbqOTxFL/JdgnL8Xcicb0Dt+JIjjLReZHtVmE ou0pWqjpyEsSR33WgniTOteM6ENhkDymc9aulusU9p+/9jDN4cQub68peNpe/Je/28A6Yrk71lDww x46Gcg9xnObrYkxuaL0g0G46Y8lvrXg==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.90_1 #2 (Red Hat Linux)) id 1h4Kd9-0007xa-0p; Thu, 14 Mar 2019 07:18:19 +0000 Received: from mta-p6.oit.umn.edu ([134.84.196.206]) by bombadil.infradead.org with esmtps (Exim 4.90_1 #2 (Red Hat Linux)) id 1h4Kd4-0007wh-W4 for linux-arm-kernel@lists.infradead.org; Thu, 14 Mar 2019 07:18:16 +0000 Received: from localhost (unknown [127.0.0.1]) by mta-p6.oit.umn.edu (Postfix) with ESMTP id 84212BA9 for ; Thu, 14 Mar 2019 07:18:07 +0000 (UTC) X-Virus-Scanned: amavisd-new at umn.edu Received: from mta-p6.oit.umn.edu ([127.0.0.1]) by localhost (mta-p6.oit.umn.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PGQwqgNaGadt for ; Thu, 14 Mar 2019 02:18:07 -0500 (CDT) Received: from mail-it1-f199.google.com (mail-it1-f199.google.com [209.85.166.199]) (using TLSv1.2 with cipher AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mta-p6.oit.umn.edu (Postfix) with ESMTPS id 51862BAC for ; Thu, 14 Mar 2019 02:18:07 -0500 (CDT) Received: by mail-it1-f199.google.com with SMTP id q141so3901811itc.2 for ; Thu, 14 Mar 2019 00:18:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=umn.edu; s=google; h=from:to:cc:subject:date:message-id; bh=oRmn4b9rhT3KDTlseWZhI2IzGPx/P3+INt92Eg01Y0c=; b=M1yj+fuo0rJqX3b9OyOKqI5LU5WCUiUzwlNCH13DL5l5yOWqW08Z1y7XGxYOyPuSjX FSHmf6KBzB3G0ki1tEhmNIwbeTOfFEuLTyS4YYwt9n4WthUJk7UmAvNUY8A0CBoNseFz cfcybQXbmmwLZmDIv30JD9ZpGDPAxdkvtZXCgql4V15dF0oqVX4PJwwd78eVvepCB95n 3L+uMR+hzQQRPKLCbWvUpW+ZiBn/Jyl1J76WtmTA0JQRJI1hbQDTK7Kmtad2aD800y7U f3hKgib6F3S+mC3O63ARoSkWfDg6VBOy3/+z3ESHG0pcyAYFQqcUa4BAasSGHtE2kwgC z7Ag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=oRmn4b9rhT3KDTlseWZhI2IzGPx/P3+INt92Eg01Y0c=; b=ijx5uFPMJAvHdG4TMHYWFXIQ3PN6JM/rSO2nDLPCSO02qwkzBUqrjpm2j7089zk+eL NH+xWqNytaTzRk7hpznY2Xe47xSfCXJiJZosHhHrGtr3N5LFtZzYB1iEV2hbr3xnVmCd nuKCtkYwhlsgqQ8PVEriEz4lhSjbQHuMN2yV7hHqOigpQCf17+0XCCb8bJ2RAgeXtHQ8 pQNN8cOcHvbGBUlRM1sh9MjQ1gtib1oKgZOpC+sujvROvQJ1rT+puHKo8MlYWuNuH+5k D74SXYUZyJA1WWI9vGMpxCZGiyvZjPgv7KjJs1XP0mPQ9kkITybTrSkYjTbGhrbFKgEb poJw== X-Gm-Message-State: APjAAAVhjRndiVkBBjfXbZLCQVrEeJpWpXl0eU8NMX7RY1x/vXcdxdLk pkardeUmuohfJlOsbgSQy0Fer97HOWsAL+t4E3YW6kp0hnYNWWNPWy7ydfd2oP58KcFSw/qdZaA k6vv0rQzj5lR/cBL9AbNkZ56RlPZXqjxDEPwR3+o= X-Received: by 2002:a24:d51:: with SMTP id 78mr1001983itx.133.1552547886937; Thu, 14 Mar 2019 00:18:06 -0700 (PDT) X-Google-Smtp-Source: APXvYqx3tadtwe+bSiINjlA7kUxPih+uN+gRSEnEL+OTIJYnGmVIF8fK5+kfFSuBsJnCuv9SMvTQtg== X-Received: by 2002:a24:d51:: with SMTP id 78mr1001966itx.133.1552547886663; Thu, 14 Mar 2019 00:18:06 -0700 (PDT) Received: from bee.dtc.umn.edu (cs-bee-u.cs.umn.edu. [128.101.106.63]) by smtp.gmail.com with ESMTPSA id z10sm6112974iol.25.2019.03.14.00.18.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 Mar 2019 00:18:05 -0700 (PDT) From: Kangjie Lu To: kjlu@umn.edu Subject: [PATCH] tty: atmel_serial: fix a NULL pointer dereference Date: Thu, 14 Mar 2019 02:17:59 -0500 Message-Id: <20190314071759.18845-1-kjlu@umn.edu> X-Mailer: git-send-email 2.17.1 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20190314_001815_119912_4C56046A X-CRM114-Status: GOOD ( 14.31 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Alexandre Belloni , Richard Genoud , Greg Kroah-Hartman , pakki001@umn.edu, linux-kernel@vger.kernel.org, Ludovic Desroches , linux-serial@vger.kernel.org, Jiri Slaby , linux-arm-kernel@lists.infradead.org MIME-Version: 1.0 Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+patchwork-linux-arm=patchwork.kernel.org@lists.infradead.org X-Virus-Scanned: ClamAV using ClamSMTP In case dmaengine_prep_dma_cyclic fails, the fix return a proper error code to avoid NULL pointer dereference. Signed-off-by: Kangjie Lu --- drivers/tty/serial/atmel_serial.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/drivers/tty/serial/atmel_serial.c b/drivers/tty/serial/atmel_serial.c index 05147fe24343..cf560d05008c 100644 --- a/drivers/tty/serial/atmel_serial.c +++ b/drivers/tty/serial/atmel_serial.c @@ -1237,8 +1237,10 @@ static int atmel_prepare_rx_dma(struct uart_port *port) dma_cap_set(DMA_CYCLIC, mask); atmel_port->chan_rx = dma_request_slave_channel(mfd_dev, "rx"); - if (atmel_port->chan_rx == NULL) + if (atmel_port->chan_rx == NULL) { + ret = -EINVAL; goto chan_err; + } dev_info(port->dev, "using %s for rx DMA transfers\n", dma_chan_name(atmel_port->chan_rx)); @@ -1257,6 +1259,7 @@ static int atmel_prepare_rx_dma(struct uart_port *port) if (!nent) { dev_dbg(port->dev, "need to release resource of dma\n"); + ret = -EINVAL; goto chan_err; } else { dev_dbg(port->dev, "%s: mapped %d@%p to %pad\n", __func__, @@ -1288,6 +1291,11 @@ static int atmel_prepare_rx_dma(struct uart_port *port) sg_dma_len(&atmel_port->sg_rx)/2, DMA_DEV_TO_MEM, DMA_PREP_INTERRUPT); + if (!desc) { + dev_err(port->dev, "Preparing DMA cyclic failed\n"); + ret = -ENOMEM; + goto chan_err; + } desc->callback = atmel_complete_rx_dma; desc->callback_param = port; atmel_port->desc_rx = desc; @@ -1300,7 +1308,7 @@ static int atmel_prepare_rx_dma(struct uart_port *port) atmel_port->use_dma_rx = 0; if (atmel_port->chan_rx) atmel_release_rx_dma(port); - return -EINVAL; + return ret; } static void atmel_uart_timer_callback(struct timer_list *t)