diff options
author | Krzysztof Kozlowski <k.kozlowski@samsung.com> | 2014-02-11 05:03:33 -0500 |
---|---|---|
committer | Lee Jones <lee.jones@linaro.org> | 2014-03-19 04:58:10 -0400 |
commit | 96cf3dedc491d2f1f66cc26217f2b06b0c7b6797 (patch) | |
tree | e0eeab0ffee918675b10931f3740811d27a89a06 /drivers/mfd/max8925-i2c.c | |
parent | ed26f87b9f71693a1d1ee85f5e6209601505080f (diff) |
mfd: max8925: Fix possible NULL pointer dereference on i2c_new_dummy error
During probe the driver allocates dummy I2C devices for RTC and ADC
with i2c_new_dummy() but it does not check the return value of this
calls.
In case of error (i2c_new_device(): memory allocation failure or I2C
address cannot be used) this function returns NULL which is later used
by i2c_unregister_device().
If i2c_new_dummy() fails for RTC or ADC devices, fail also the probe
for main MFD driver.
Cc: stable@vger.kernel.org
Signed-off-by: Krzysztof Kozlowski <k.kozlowski@samsung.com>
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Diffstat (limited to 'drivers/mfd/max8925-i2c.c')
-rw-r--r-- | drivers/mfd/max8925-i2c.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/drivers/mfd/max8925-i2c.c b/drivers/mfd/max8925-i2c.c index 176aa26fc787..a83eed5c15ca 100644 --- a/drivers/mfd/max8925-i2c.c +++ b/drivers/mfd/max8925-i2c.c | |||
@@ -181,9 +181,18 @@ static int max8925_probe(struct i2c_client *client, | |||
181 | mutex_init(&chip->io_lock); | 181 | mutex_init(&chip->io_lock); |
182 | 182 | ||
183 | chip->rtc = i2c_new_dummy(chip->i2c->adapter, RTC_I2C_ADDR); | 183 | chip->rtc = i2c_new_dummy(chip->i2c->adapter, RTC_I2C_ADDR); |
184 | if (!chip->rtc) { | ||
185 | dev_err(chip->dev, "Failed to allocate I2C device for RTC\n"); | ||
186 | return -ENODEV; | ||
187 | } | ||
184 | i2c_set_clientdata(chip->rtc, chip); | 188 | i2c_set_clientdata(chip->rtc, chip); |
185 | 189 | ||
186 | chip->adc = i2c_new_dummy(chip->i2c->adapter, ADC_I2C_ADDR); | 190 | chip->adc = i2c_new_dummy(chip->i2c->adapter, ADC_I2C_ADDR); |
191 | if (!chip->adc) { | ||
192 | dev_err(chip->dev, "Failed to allocate I2C device for ADC\n"); | ||
193 | i2c_unregister_device(chip->rtc); | ||
194 | return -ENODEV; | ||
195 | } | ||
187 | i2c_set_clientdata(chip->adc, chip); | 196 | i2c_set_clientdata(chip->adc, chip); |
188 | 197 | ||
189 | device_init_wakeup(&client->dev, 1); | 198 | device_init_wakeup(&client->dev, 1); |