899a61a330
In dibusb_read_eeprom_byte(), if dibusb_i2c_msg() fails, val gets assigned an value that's not properly initialized. Using kzalloc() in place of kmalloc() for the buffer fixes this issue, as the val can now be set to 0 in the event dibusb_i2c_msg() fails. Reported-by: syzbot+e27b4fd589762b0b9329@syzkaller.appspotmail.com Tested-by: syzbot+e27b4fd589762b0b9329@syzkaller.appspotmail.com Signed-off-by: Anant Thazhemadam <anant.thazhemadam@gmail.com> Signed-off-by: Sean Young <sean@mess.org> Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| a800.c | ||
| af9005-fe.c | ||
| af9005-remote.c | ||
| af9005-script.h | ||
| af9005.c | ||
| af9005.h | ||
| az6027.c | ||
| az6027.h | ||
| cinergyT2-core.c | ||
| cinergyT2-fe.c | ||
| cinergyT2.h | ||
| cxusb-analog.c | ||
| cxusb.c | ||
| cxusb.h | ||
| dib07x0.h | ||
| dib0700.h | ||
| dib0700_core.c | ||
| dib0700_devices.c | ||
| dibusb-common.c | ||
| dibusb-mb.c | ||
| dibusb-mc-common.c | ||
| dibusb-mc.c | ||
| dibusb.h | ||
| digitv.c | ||
| digitv.h | ||
| dtt200u-fe.c | ||
| dtt200u.c | ||
| dtt200u.h | ||
| dtv5100.c | ||
| dtv5100.h | ||
| dvb-usb-common.h | ||
| dvb-usb-dvb.c | ||
| dvb-usb-firmware.c | ||
| dvb-usb-i2c.c | ||
| dvb-usb-init.c | ||
| dvb-usb-remote.c | ||
| dvb-usb-urb.c | ||
| dvb-usb.h | ||
| dw2102.c | ||
| dw2102.h | ||
| gp8psk.c | ||
| gp8psk.h | ||
| m920x.c | ||
| m920x.h | ||
| nova-t-usb2.c | ||
| opera1.c | ||
| pctv452e.c | ||
| technisat-usb2.c | ||
| ttusb2.c | ||
| ttusb2.h | ||
| umt-010.c | ||
| usb-urb.c | ||
| vp702x-fe.c | ||
| vp702x.c | ||
| vp702x.h | ||
| vp7045-fe.c | ||
| vp7045.c | ||
| vp7045.h | ||