diff options
| author | Marek Vasut <marex@denx.de> | 2022-01-28 06:39:09 +0300 |
|---|---|---|
| committer | Marek Vasut <marex@denx.de> | 2022-02-11 03:30:43 +0300 |
| commit | 1f54025d70c4c9e6ec8d82d8b69b0d66a7bbbdc1 (patch) | |
| tree | 9bef96af751771bf32ddce1e9f80d35fd27b093a /drivers | |
| parent | 96991e652f541323a03c5b7e075d54a117091618 (diff) | |
| download | u-boot-1f54025d70c4c9e6ec8d82d8b69b0d66a7bbbdc1.tar.xz | |
usb: gadget: ci: Avoid null pointer dereference
The ci_req->hw_buf can be NULL, test whether it is and if so,
avoid accessing it. Else, the system may crash.
Signed-off-by: Marek Vasut <marex@denx.de>
Cc: Peter Chen <peter.chen@nxp.com>
Cc: Li Jun <jun.li@nxp.com>
Cc: Peng Fan <peng.fan@nxp.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/usb/gadget/ci_udc.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/drivers/usb/gadget/ci_udc.c b/drivers/usb/gadget/ci_udc.c index 226a9e6d67..542684c1c3 100644 --- a/drivers/usb/gadget/ci_udc.c +++ b/drivers/usb/gadget/ci_udc.c @@ -402,6 +402,9 @@ align: flush: hwaddr = (unsigned long)ci_req->hw_buf; + if (!hwaddr) + return 0; + aligned_used_len = roundup(req->length, ARCH_DMA_MINALIGN); flush_dcache_range(hwaddr, hwaddr + aligned_used_len); @@ -415,7 +418,7 @@ static void ci_debounce(struct ci_req *ci_req, int in) unsigned long hwaddr = (unsigned long)ci_req->hw_buf; uint32_t aligned_used_len; - if (in) + if (in || !hwaddr) return; aligned_used_len = roundup(req->actual, ARCH_DMA_MINALIGN); |