RTOS/rtems
1
0
Fork 0
forked from Imagelibrary/rtems
Code Pull Requests Activity

b1553brm.c: Fix Dereference before null check (CID #1399829)

Browse Source 
CID 1399829: Dereference before null check in brm_control().

Closes #4250
This commit is contained in:
Ryan Long
2021-02-16 16:20:04 -05:00
committed by Joel Sherrill
parent 8b1b987201
commit eff3d7c05f
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
bsps/shared/grlib/1553/b1553brm.c
View File

@@ -994,8 +994,8 @@ static rtems_device_driver brm_control(rtems_device_major_number major, rtems_de
unsigned int i=0; unsigned int i=0;
unsigned short ctrl, oper, cw1, cw2; unsigned short ctrl, oper, cw1, cw2;
rtems_libio_ioctl_args_t *ioarg = (rtems_libio_ioctl_args_t *) arg; rtems_libio_ioctl_args_t *ioarg = (rtems_libio_ioctl_args_t *) arg;
unsigned int *data = ioarg->buffer; unsigned int *data;
struct bc_msg *cmd_list = (struct bc_msg *) ioarg->buffer; struct bc_msg *cmd_list;
brm_priv *brm; brm_priv *brm;
struct drvmgr_dev *dev; struct drvmgr_dev *dev;
rtems_device_driver ret; rtems_device_driver ret;
@@ -1013,6 +1013,9 @@ static rtems_device_driver brm_control(rtems_device_major_number major, rtems_de
return RTEMS_INVALID_NAME; return RTEMS_INVALID_NAME;
} }
data = ioarg->buffer;
cmd_list = (struct bc_msg *) ioarg->buffer;
ioarg->ioctl_return = 0; ioarg->ioctl_return = 0;
switch (ioarg->command) { switch (ioarg->command) {