Details

[Home]

Issue of the Implementation # L0013

Brief

drivers/ata/sata_mv.c: Null dereference

Detailed Description

Null dereference in driver drivers/ata/ata_mv.c in function mv_port_intr: Path:

  • Line 2778: suppose that ap == null, in this case we goto 2779
  • Line 2779: call function mv_unexpected_intr
  • Line 2538 (function mv_unexpected_intr): null dereference of "&ap->link.eh_info"
  • 2773 static void mv_port_intr(struct ata_port *ap, u32 port_cause)
    2774 {
    ...
    2778         if (!ap || (ap->flags & ATA_FLAG_DISABLED)) {
    2779                 mv_unexpected_intr(ap, 0);
    2780                 return;
    2781         }
    ...
    2809 }
    
    2536 static void mv_unexpected_intr(struct ata_port *ap, int edma_was_enabled)
    2537 {
    2538         struct ata_eh_info *ehi = ;
    ...
    2555 }
    

    Component

    linux-kernel 2.6.32

    Accepted

    http://lkml.org/lkml/2009/12/14/237
    commit

    Status

    Fixed in kernel 2.6.33

    [Home]