diff options
| author |   Michael Chan <michael.chan@broadcom.com> | 2017-02-20 19:25:17 -0500 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2017-02-20 21:59:15 -0500 |
| commit | daf1f1e7841138cb0e48d52c8573a5f064d8f495 (patch) | |
| tree | 02f76b565b4e3fa80bee41bacc1da0c851e92684 /COPYING | |
| parent | bnxt_en: Reject driver probe against all bridge devices (diff) | |
| download | linux-dev-daf1f1e7841138cb0e48d52c8573a5f064d8f495.tar.xz linux-dev-daf1f1e7841138cb0e48d52c8573a5f064d8f495.zip | |
bnxt_en: Fix NULL pointer dereference in a failure path during open.
If bnxt_hwrm_ring_free() is called during a failure path in bnxt_open(),
it is possible that the completion rings have not been allocated yet.
In that case, the completion doorbell has not been initialized, and
calling bnxt_disable_int() will crash. Fix it by checking that the
completion ring has been initialized before writing to the completion
ring doorbell.
Signed-off-by: Michael Chan <michael.chan@broadcom.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'COPYING')
0 files changed, 0 insertions, 0 deletions