Skip to content

Commit de9e5ae

Browse files
Thierry EscandeSamuel Ortiz
authored andcommitted
NFC: llcp: Fix usage of llcp_add_tlv()
In functions using llcp_add_tlv(), a skb pointer could be set to NULL and then reuse afterward. With this patch, the skb pointer returned by llcp_add_tlv() is ignored since it can only be the passed skb pointer or NULL when the passed TLV is NULL. There is also no need to check for the TLV pointer as this is done by llcp_add_tlv(). Signed-off-by: Thierry Escande <thierry.escande@collabora.com> Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
1 parent 204bddc commit de9e5ae

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

net/nfc/llcp_commands.c

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -438,12 +438,9 @@ int nfc_llcp_send_connect(struct nfc_llcp_sock *sock)
438438
goto error_tlv;
439439
}
440440

441-
if (service_name_tlv != NULL)
442-
skb = llcp_add_tlv(skb, service_name_tlv,
443-
service_name_tlv_length);
444-
445-
skb = llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
446-
skb = llcp_add_tlv(skb, rw_tlv, rw_tlv_length);
441+
llcp_add_tlv(skb, service_name_tlv, service_name_tlv_length);
442+
llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
443+
llcp_add_tlv(skb, rw_tlv, rw_tlv_length);
447444

448445
skb_queue_tail(&local->tx_queue, skb);
449446

@@ -493,8 +490,8 @@ int nfc_llcp_send_cc(struct nfc_llcp_sock *sock)
493490
goto error_tlv;
494491
}
495492

496-
skb = llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
497-
skb = llcp_add_tlv(skb, rw_tlv, rw_tlv_length);
493+
llcp_add_tlv(skb, miux_tlv, miux_tlv_length);
494+
llcp_add_tlv(skb, rw_tlv, rw_tlv_length);
498495

499496
skb_queue_tail(&local->tx_queue, skb);
500497

0 commit comments

Comments
 (0)