mmc: card: Avoid null pointer dereference
After the null check on md the code jumped to cmd_done, which then will dereference md in mmc_blk_put. This patch avoids the possible null pointer dereference in that case. Signed-off-by: Philippe De Swert <philippedeswert@gmail.com> Reviewed-by: Namjae Jeon <linkinjeon@gmail.com> Signed-off-by: Chris Ball <cjb@laptop.org>
This commit is contained in:
parent
fa5501890d
commit
1c02f000e7
1 changed files with 2 additions and 1 deletions
|
@ -384,7 +384,7 @@ static int mmc_blk_ioctl_cmd(struct block_device *bdev,
|
||||||
md = mmc_blk_get(bdev->bd_disk);
|
md = mmc_blk_get(bdev->bd_disk);
|
||||||
if (!md) {
|
if (!md) {
|
||||||
err = -EINVAL;
|
err = -EINVAL;
|
||||||
goto cmd_done;
|
goto cmd_err;
|
||||||
}
|
}
|
||||||
|
|
||||||
card = md->queue.card;
|
card = md->queue.card;
|
||||||
|
@ -483,6 +483,7 @@ static int mmc_blk_ioctl_cmd(struct block_device *bdev,
|
||||||
|
|
||||||
cmd_done:
|
cmd_done:
|
||||||
mmc_blk_put(md);
|
mmc_blk_put(md);
|
||||||
|
cmd_err:
|
||||||
kfree(idata->buf);
|
kfree(idata->buf);
|
||||||
kfree(idata);
|
kfree(idata);
|
||||||
return err;
|
return err;
|
||||||
|
|
Loading…
Reference in a new issue