diff options
| author | Gregory Nutt <gnutt@nuttx.org> | 2015-03-12 07:58:36 -0600 |
|---|---|---|
| committer | Gregory Nutt <gnutt@nuttx.org> | 2015-03-12 07:58:36 -0600 |
| commit | deaad84fc5d1d2009a8d1e969408e7ae1de8f829 (patch) | |
| tree | 11694b336b2886a9942c8d023e95f79bd5521fc9 /nuttx/drivers | |
| parent | f6ff3be5855a5bdec6b0335bb0670f55c928478b (diff) | |
| download | px4-nuttx-deaad84fc5d1d2009a8d1e969408e7ae1de8f829.tar.gz px4-nuttx-deaad84fc5d1d2009a8d1e969408e7ae1de8f829.tar.bz2 px4-nuttx-deaad84fc5d1d2009a8d1e969408e7ae1de8f829.zip | |
chdev_driver: Avoid NULL pointer dereference when bch->refs == 255. From Juha Niskanen
Diffstat (limited to 'nuttx/drivers')
| -rw-r--r-- | nuttx/drivers/bch/bchdev_driver.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nuttx/drivers/bch/bchdev_driver.c b/nuttx/drivers/bch/bchdev_driver.c index 7e3d2abcb..d1a23c554 100644 --- a/nuttx/drivers/bch/bchdev_driver.c +++ b/nuttx/drivers/bch/bchdev_driver.c @@ -307,7 +307,7 @@ static int bch_ioctl(FAR struct file *filep, int cmd, unsigned long arg) FAR struct bchlib_s **bchr = (FAR struct bchlib_s **)((uintptr_t)arg); bchlib_semtake(bch); - if (!bchr && bch->refs < 255) + if (!bchr || bch->refs == MAX_OPENCNT) { ret = -EINVAL; } |