Staging: rtl8192u: r819xU_cmdpkt: checking NULL value after doing dev_alloc_skb
Checking the return of dev_alloc_skb as stated in the following bug: https://bugzilla.kernel.org/show_bug.cgi?id=60411 Signed-off-by: Iker Pedrosa <ikerpedrosam@gmail.com> Reported-by: RUC_Soft_Sec rucsoftsec@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
3ff4afe80e
commit
c3aed2312f
|
@ -37,6 +37,8 @@ rt_status SendTxCommandPacket(struct net_device *dev, void *pData, u32 DataLen)
|
||||||
/* Get TCB and local buffer from common pool.
|
/* Get TCB and local buffer from common pool.
|
||||||
(It is shared by CmdQ, MgntQ, and USB coalesce DataQ) */
|
(It is shared by CmdQ, MgntQ, and USB coalesce DataQ) */
|
||||||
skb = dev_alloc_skb(USB_HWDESC_HEADER_LEN + DataLen + 4);
|
skb = dev_alloc_skb(USB_HWDESC_HEADER_LEN + DataLen + 4);
|
||||||
|
if (!skb)
|
||||||
|
return RT_STATUS_FAILURE;
|
||||||
memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
|
memcpy((unsigned char *)(skb->cb), &dev, sizeof(dev));
|
||||||
tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
|
tcb_desc = (cb_desc *)(skb->cb + MAX_DEV_ADDR_SIZE);
|
||||||
tcb_desc->queue_index = TXCMD_QUEUE;
|
tcb_desc->queue_index = TXCMD_QUEUE;
|
||||||
|
|
Loading…
Reference in New Issue