BUG null dreference in driver drivers/net/hamradio/bpqether.c
From: Alexander Strakh <hidden>
Date: 2009-12-15 17:55:09
Also in:
linux-hams
From: Alexander Strakh <hidden>
Date: 2009-12-15 17:55:09
Also in:
linux-hams
KERNEL_VERSION: 2.6.32
SUBJECT: null derefernce in function bpq_xmit
SUBSCRIBE:
In driver drivers/net/hamradio/bpqether.c in function bpq_xmit:
1. if in line 288 after calling function bpq_get_ether_dev variable dev =
NULL, then we goto line 289
2. In line 289: null dereference of dev - "dev->stats.tx_dropped++"
288 if ((dev = bpq_get_ether_dev(dev)) == NULL) {
289 dev->stats.tx_dropped++;
290 kfree_skb(skb);
291 return NETDEV_TX_OK;
292 }
Found by Linux Device Drivers Verification Project (Svace Detector)