|
Takashi Iwai |
295fd9 |
From 9ccb645683ef46e3c52c12c088a368baa58447d4 Mon Sep 17 00:00:00 2001
|
|
Takashi Iwai |
295fd9 |
From: Colin Ian King <colin.king@canonical.com>
|
|
Takashi Iwai |
295fd9 |
Date: Sat, 24 Nov 2018 12:34:10 +0000
|
|
Takashi Iwai |
295fd9 |
Subject: [PATCH] altera-stapl: check for a null key before strcasecmp'ing it
|
|
Takashi Iwai |
295fd9 |
Git-commit: 9ccb645683ef46e3c52c12c088a368baa58447d4
|
|
Takashi Iwai |
295fd9 |
Patch-mainline: v5.0-rc1
|
|
Takashi Iwai |
295fd9 |
References: bsc#1051510
|
|
Takashi Iwai |
295fd9 |
|
|
Takashi Iwai |
295fd9 |
Currently the null check on key is occurring after the strcasecmp on
|
|
Takashi Iwai |
295fd9 |
the key, hence there is a potential null pointer dereference on key.
|
|
Takashi Iwai |
295fd9 |
Fix this by checking if key is null first. Also replace the == 0
|
|
Takashi Iwai |
295fd9 |
check on strcasecmp with just the ! operator.
|
|
Takashi Iwai |
295fd9 |
|
|
Takashi Iwai |
295fd9 |
Detected by CoverityScan, CID#1248787 ("Dereference before null check")
|
|
Takashi Iwai |
295fd9 |
|
|
Takashi Iwai |
295fd9 |
Fixes: fa766c9be58b ("[media] Altera FPGA firmware download module")
|
|
Takashi Iwai |
295fd9 |
Signed-off-by: Colin Ian King <colin.king@canonical.com>
|
|
Takashi Iwai |
295fd9 |
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
|
Takashi Iwai |
295fd9 |
Acked-by: Takashi Iwai <tiwai@suse.de>
|
|
Takashi Iwai |
295fd9 |
|
|
Takashi Iwai |
295fd9 |
---
|
|
Takashi Iwai |
295fd9 |
drivers/misc/altera-stapl/altera.c | 3 +--
|
|
Takashi Iwai |
295fd9 |
1 file changed, 1 insertion(+), 2 deletions(-)
|
|
Takashi Iwai |
295fd9 |
|
|
Takashi Iwai |
295fd9 |
diff --git a/drivers/misc/altera-stapl/altera.c b/drivers/misc/altera-stapl/altera.c
|
|
Takashi Iwai |
295fd9 |
index ef83a9078646..d2ed3b9728b7 100644
|
|
Takashi Iwai |
295fd9 |
--- a/drivers/misc/altera-stapl/altera.c
|
|
Takashi Iwai |
295fd9 |
+++ b/drivers/misc/altera-stapl/altera.c
|
|
Takashi Iwai |
295fd9 |
@@ -2176,8 +2176,7 @@ static int altera_get_note(u8 *p, s32 program_size,
|
|
Takashi Iwai |
295fd9 |
key_ptr = &p[note_strings +
|
|
Takashi Iwai |
295fd9 |
get_unaligned_be32(
|
|
Takashi Iwai |
295fd9 |
&p[note_table + (8 * i)])];
|
|
Takashi Iwai |
295fd9 |
- if ((strncasecmp(key, key_ptr, strlen(key_ptr)) == 0) &&
|
|
Takashi Iwai |
295fd9 |
- (key != NULL)) {
|
|
Takashi Iwai |
295fd9 |
+ if (key && !strncasecmp(key, key_ptr, strlen(key_ptr))) {
|
|
Takashi Iwai |
295fd9 |
status = 0;
|
|
Takashi Iwai |
295fd9 |
|
|
Takashi Iwai |
295fd9 |
value_ptr = &p[note_strings +
|
|
Takashi Iwai |
295fd9 |
--
|
|
Takashi Iwai |
295fd9 |
2.16.4
|
|
Takashi Iwai |
295fd9 |
|