projects
/
linux.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
eecc70d
)
media: af9005: uninitialized variable printked
author
Sean Young
<sean@mess.org>
Sun, 10 Nov 2019 10:15:37 +0000
(11:15 +0100)
committer
Mauro Carvalho Chehab
<mchehab+huawei@kernel.org>
Fri, 3 Jan 2020 15:13:30 +0000
(16:13 +0100)
If usb_bulk_msg() fails, actual_length can be uninitialized.
Reported-by: syzbot+9d42b7773d2fecd983ab@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
drivers/media/usb/dvb-usb/af9005.c
patch
|
blob
|
history
diff --git
a/drivers/media/usb/dvb-usb/af9005.c
b/drivers/media/usb/dvb-usb/af9005.c
index ac93e88d70382a11f03410f4242df6a016ecac18..89b4b5d84cdff49e4fd8bcba45cd830b35a4c51f 100644
(file)
--- a/
drivers/media/usb/dvb-usb/af9005.c
+++ b/
drivers/media/usb/dvb-usb/af9005.c
@@
-554,7
+554,7
@@
static int af9005_boot_packet(struct usb_device *udev, int type, u8 *reply,
u8 *buf, int size)
{
u16 checksum;
- int act_len, i, ret;
+ int act_len
= 0
, i, ret;
memset(buf, 0, size);
buf[0] = (u8) (FW_BULKOUT_SIZE & 0xff);