From: SEO HOYOUNG <hy50.seo@samsung.com>
Date: Fri, 17 May 2019 01:40:45 +0000 (+0900)
Subject: [RAMEN9610-15104] usb: gadget: add null check on mtp read/write
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=92c7cc28627fe61de7432406a149e8db12efc8eb;p=GitHub%2FLineageOS%2Fandroid_kernel_motorola_exynos9610.git

[RAMEN9610-15104] usb: gadget: add null check on mtp read/write

Change-Id: I945f116762cfcb836b7e5273b1dd2ce15413a3fd
Signed-off-by: SEO HOYOUNG <hy50.seo@samsung.com>
---

diff --git a/drivers/usb/gadget/function/f_mtp.c b/drivers/usb/gadget/function/f_mtp.c
index 9b8b6f4a2c70..302f073370e1 100644
--- a/drivers/usb/gadget/function/f_mtp.c
+++ b/drivers/usb/gadget/function/f_mtp.c
@@ -564,6 +564,11 @@ static ssize_t mtp_read(struct file *fp, char __user *buf,
 	int ret = 0;
 	size_t len = 0;
 
+	if (!cdev) {
+		pr_err("%s: check cdev is NULL\n", __func__);
+		return -EINVAL;
+	}
+
 	DBG(cdev, "mtp_read(%zu)\n", count);
 
 	/* we will block until we're online */
@@ -649,6 +654,11 @@ static ssize_t mtp_write(struct file *fp, const char __user *buf,
 	int sendZLP = 0;
 	int ret;
 
+	if (!cdev) {
+		pr_err("%s: check cdev is NULL\n", __func__);
+		return -EINVAL;
+	}
+
 	DBG(cdev, "mtp_write(%zu)\n", count);
 
 	spin_lock_irq(&dev->lock);