summaryrefslogtreecommitdiffstats
path: root/drivers/mfd/max8925-i2c.c
diff options
context:
space:
mode:
authorKrzysztof Kozlowski <k.kozlowski@samsung.com>2014-02-11 05:03:33 -0500
committerLee Jones <lee.jones@linaro.org>2014-03-19 04:58:10 -0400
commit96cf3dedc491d2f1f66cc26217f2b06b0c7b6797 (patch)
treee0eeab0ffee918675b10931f3740811d27a89a06 /drivers/mfd/max8925-i2c.c
parented26f87b9f71693a1d1ee85f5e6209601505080f (diff)
mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy error
During probe the driver allocates dummy I2C devices for RTC and ADC with i2c_new_dummy() but it does not check the return value of this calls. In case of error (i2c_new_device(): memory allocation failure or I2C address cannot be used) this function returns NULL which is later used by i2c_unregister_device(). If i2c_new_dummy() fails for RTC or ADC devices, fail also the probe for main MFD driver. Cc: stable@vger.kernel.org Signed-off-by: Krzysztof Kozlowski <k.kozlowski@samsung.com> Signed-off-by: Lee Jones <lee.jones@linaro.org>
Diffstat (limited to 'drivers/mfd/max8925-i2c.c')
-rw-r--r--drivers/mfd/max8925-i2c.c9
1 files changed, 9 insertions, 0 deletions
diff --git a/drivers/mfd/max8925-i2c.c b/drivers/mfd/max8925-i2c.c
index 176aa26fc787..a83eed5c15ca 100644
--- a/drivers/mfd/max8925-i2c.c
+++ b/drivers/mfd/max8925-i2c.c
@@ -181,9 +181,18 @@ static int max8925_probe(struct i2c_client *client,
181 mutex_init(&chip->io_lock); 181 mutex_init(&chip->io_lock);
182 182
183 chip->rtc = i2c_new_dummy(chip->i2c->adapter, RTC_I2C_ADDR); 183 chip->rtc = i2c_new_dummy(chip->i2c->adapter, RTC_I2C_ADDR);
184 if (!chip->rtc) {
185 dev_err(chip->dev, "Failed to allocate I2C device for RTC\n");
186 return -ENODEV;
187 }
184 i2c_set_clientdata(chip->rtc, chip); 188 i2c_set_clientdata(chip->rtc, chip);
185 189
186 chip->adc = i2c_new_dummy(chip->i2c->adapter, ADC_I2C_ADDR); 190 chip->adc = i2c_new_dummy(chip->i2c->adapter, ADC_I2C_ADDR);
191 if (!chip->adc) {
192 dev_err(chip->dev, "Failed to allocate I2C device for ADC\n");
193 i2c_unregister_device(chip->rtc);
194 return -ENODEV;
195 }
187 i2c_set_clientdata(chip->adc, chip); 196 i2c_set_clientdata(chip->adc, chip);
188 197
189 device_init_wakeup(&client->dev, 1); 198 device_init_wakeup(&client->dev, 1);