diff options
| author | Denis Arefev <arefev@swemel.ru> | 2025-10-09 13:50:47 +0300 |
|---|---|---|
| committer | Takashi Iwai <tiwai@suse.de> | 2025-10-11 08:28:52 +0200 |
| commit | 1cf11d80db5df805b538c942269e05a65bcaf5bc (patch) | |
| tree | 71ef49ea9b47c92572ee17337a43d31fc261fb07 /drivers/infiniband/hw/ionic/ionic_datapath.c | |
| parent | 8527bbb33936340525a3504a00932b2f8fd75754 (diff) | |
ALSA: hda: Fix missing pointer check in hda_component_manager_init function
The __component_match_add function may assign the 'matchptr' pointer
the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced.
The call stack leading to the error looks like this:
hda_component_manager_init
|-> component_match_add
|-> component_match_add_release
|-> __component_match_add ( ... ,**matchptr, ... )
|-> *matchptr = ERR_PTR(-ENOMEM); // assign
|-> component_master_add_with_match( ... match)
|-> component_match_realloc(match, match->num); // dereference
Add IS_ERR() check to prevent the crash.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes: ae7abe36e352 ("ALSA: hda/realtek: Add CS35L41 support for Thinkpad laptops")
Cc: stable@vger.kernel.org
Signed-off-by: Denis Arefev <arefev@swemel.ru>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Diffstat (limited to 'drivers/infiniband/hw/ionic/ionic_datapath.c')
0 files changed, 0 insertions, 0 deletions
