diff options
author | Anant Thazhemadam <anant.thazhemadam@gmail.com> | 2020-12-07 07:16:06 +0100 |
---|---|---|
committer | Mauro Carvalho Chehab <mchehab+huawei@kernel.org> | 2021-10-08 13:54:43 +0200 |
commit | 899a61a3305d49e8a712e9ab20d0db94bde5929f (patch) | |
tree | 5980ac0299b878b7724e79a888f83340c211a91e /Documentation/driver-api/media/rc-core.rst | |
parent | cefdc9510a16f59de6ff82ed90c841545ec0aa13 (diff) |
media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
In dibusb_read_eeprom_byte(), if dibusb_i2c_msg() fails, val gets
assigned an value that's not properly initialized.
Using kzalloc() in place of kmalloc() for the buffer fixes this issue,
as the val can now be set to 0 in the event dibusb_i2c_msg() fails.
Reported-by: syzbot+e27b4fd589762b0b9329@syzkaller.appspotmail.com
Tested-by: syzbot+e27b4fd589762b0b9329@syzkaller.appspotmail.com
Signed-off-by: Anant Thazhemadam <anant.thazhemadam@gmail.com>
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
Diffstat (limited to 'Documentation/driver-api/media/rc-core.rst')
0 files changed, 0 insertions, 0 deletions