]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commitdiff
parisc: led: Fix potential null-ptr-deref in start_task()
authorShang XiaoJing <shangxiaojing@huawei.com>
Thu, 17 Nov 2022 02:45:14 +0000 (10:45 +0800)
committerHelge Deller <deller@gmx.de>
Sat, 17 Dec 2022 22:19:38 +0000 (23:19 +0100)
start_task() calls create_singlethread_workqueue() and not checked the
ret value, which may return NULL. And a null-ptr-deref may happen:

start_task()
    create_singlethread_workqueue() # failed, led_wq is NULL
    queue_delayed_work()
        queue_delayed_work_on()
            __queue_delayed_work()  # warning here, but continue
                __queue_work()      # access wq->flags, null-ptr-deref

Check the ret value and return -ENOMEM if it is NULL.

Fixes: 3499495205a6 ("[PARISC] Use work queue in LED/LCD driver instead of tasklet.")
Signed-off-by: Shang XiaoJing <shangxiaojing@huawei.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Cc: <stable@vger.kernel.org>
drivers/parisc/led.c

index d4be9d2ee74d9254b7d9a57797d2460c646060ad..8bdc5e043831cdbab4117a999d6127ca7f356dcb 100644 (file)
@@ -137,6 +137,9 @@ static int start_task(void)
 
        /* Create the work queue and queue the LED task */
        led_wq = create_singlethread_workqueue("led_wq");       
+       if (!led_wq)
+               return -ENOMEM;
+
        queue_delayed_work(led_wq, &led_task, 0);
 
        return 0;