commit 9fa1b1dc9923a7b5892df4feadef4bd953c8665b
author William Clark <wclark@codeaurora.org> Thu Apr 09 17:58:56 2015 -0700
committer Devin Kim <dojip.kim@lge.com> Mon May 02 10:43:55 2016 -0700
tree c65f5c8a300da4ac0042bccebde47d47b3929d0a
parent 67bbef1886426f703a1eccb8441a10dd355b6078

qseecom: Fix NULL pointer dereference

Application name passed from the user space might be NULL or
corrupted, which if accessed later on might end up in NULL
pointer dereference.

Change-Id: I3c91c19a60cee209436218dd9ea370ef53c8c8b6
Signed-off-by: William Clark <wclark@codeaurora.org>

drivers/misc/qseecom.c

diff --git a/drivers/misc/qseecom.c b/drivers/misc/qseecom.c
index ec2733d..76afe3c 100644
--- a/drivers/misc/qseecom.c
+++ b/drivers/misc/qseecom.c
@@ -2359,7 +2359,11 @@
 	size_t len;
 	ion_phys_addr_t pa;
 
-	if (!app_name || strlen(app_name) >= MAX_APP_NAME_SIZE) {
+	if (!app_name) {
+		pr_err("failed to get the app name\n");
+		return -EINVAL;
+	}
+	if (strlen(app_name) >= MAX_APP_NAME_SIZE) {
 		pr_err("The app_name (%s) with length %zu is not valid\n",
 			app_name, strlen(app_name));
 		return -EINVAL;