Commit 4cf65845 authored by Yunshui Jiang's avatar Yunshui Jiang Committed by Dmitry Torokhov
Browse files

Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() 



The cs40l50_upload_owt() function allocates memory via kmalloc()
without checking for allocation failure, which could lead to a
NULL pointer dereference.

Return -ENOMEM in case allocation fails.

Signed-off-by: default avatarYunshui Jiang <jiangyunshui@kylinos.cn>
Fixes: c38fe1bb ("Input: cs40l50 - Add support for the CS40L50 haptic driver")
Link: https://lore.kernel.org/r/20250704024010.2353841-1-jiangyunshui@kylinos.cn


Cc: stable@vger.kernel.org
Signed-off-by: default avatarDmitry Torokhov <dmitry.torokhov@gmail.com>
parent a106b6a8

drivers/input/misc/cs40l50-vibra.c

+2 −0
Original line number Diff line number Diff line
@@ -238,6 +238,8 @@ static int cs40l50_upload_owt(struct cs40l50_work *work_data) 
	header.data_words = len / sizeof(u32);



	new_owt_effect_data = kmalloc(sizeof(header) + len, GFP_KERNEL);

	if (!new_owt_effect_data)

		return -ENOMEM;



	memcpy(new_owt_effect_data, &header, sizeof(header));

	memcpy(new_owt_effect_data + sizeof(header), work_data->custom_data, len);