staging: wilc1000: check for kmalloc allocation failures

There are three kmalloc allocations that are not null checked which
potentially could lead to null pointer dereference issues. Fix this
by adding null pointer return checks.

Detected by CoverityScan, CID#1466025-27 ("Dereference null return")

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

diff --git a/drivers/staging/wilc1000/host_interface.c b/drivers/staging/wilc1000/host_interface.c
index 5082ede720f0f75292e72b51da90145c17fa773f..9b9b86654958ff7837593dbb5eb732b930a4293c 100644 (file)
--- a/drivers/staging/wilc1000/host_interface.c
+++ b/drivers/staging/wilc1000/host_interface.c
@@ -944,6 +944,10 @@ static s32 handle_connect(struct wilc_vif *vif,
 
        if (conn_attr->bssid) {
                hif_drv->usr_conn_req.bssid = kmalloc(6, GFP_KERNEL);
+               if (!hif_drv->usr_conn_req.bssid) {
+                       result = -ENOMEM;
+                       goto error;
+               }
                memcpy(hif_drv->usr_conn_req.bssid, conn_attr->bssid, 6);
        }
 
@@ -951,6 +955,10 @@ static s32 handle_connect(struct wilc_vif *vif,
        if (conn_attr->ssid) {
                hif_drv->usr_conn_req.ssid = kmalloc(conn_attr->ssid_len + 1,
                                                     GFP_KERNEL);
+               if (!hif_drv->usr_conn_req.ssid) {
+                       result = -ENOMEM;
+                       goto error;
+               }
                memcpy(hif_drv->usr_conn_req.ssid,
                       conn_attr->ssid,
                       conn_attr->ssid_len);
@@ -961,6 +969,10 @@ static s32 handle_connect(struct wilc_vif *vif,
        if (conn_attr->ies) {
                hif_drv->usr_conn_req.ies = kmalloc(conn_attr->ies_len,
                                                    GFP_KERNEL);
+               if (!hif_drv->usr_conn_req.ies) {
+                       result = -ENOMEM;
+                       goto error;
+               }
                memcpy(hif_drv->usr_conn_req.ies,
                       conn_attr->ies,
                       conn_attr->ies_len);