Krzysztof Kozlowski d15d1e0358 power: max17040: Fix NULL pointer dereference when there is no platform_data ... commit ac323d8d80 upstream. Fix NULL pointer dereference of "chip->pdata" if platform_data was not supplied to the driver. The driver during probe stored the pointer to the platform_data: chip->pdata = client->dev.platform_data; Later it was dereferenced in max17040_get_online() and max17040_get_status(). If platform_data was not supplied, the NULL pointer exception would happen: [ 6.626094] Unable to handle kernel of a at virtual address 00000000 [ 6.628557] pgd = c0004000 [ 6.632868] [00000000] *pgd=66262564 [ 6.634636] Unable to handle kernel paging request at virtual address e6262000 [ 6.642014] pgd = de468000 [ 6.644700] [e6262000] *pgd=00000000 [ 6.648265] Internal error: Oops: 5 [#1] PREEMPT SMP ARM [ 6.653552] Modules linked in: [ 6.656598] CPU: 0 PID: 31 Comm: kworker/0:1 Not tainted 3.10.14-02717-gc58b4b4 #505 [ 6.664334] Workqueue: events max17040_work [ 6.668488] task: dfa11b80 ti: df9f6000 task.ti: df9f6000 [ 6.673873] PC is at show_pte+0x80/0xb8 [ 6.677687] LR is at show_pte+0x3c/0xb8 [ 6.681503] pc : [<c001b7b8>] lr : [<c001b774>] psr: 600f0113 [ 6.681503] sp : df9f7d58 ip : 600f0113 fp : 00000009 [ 6.692965] r10: 00000000 r9 : 00000000 r8 : dfa11b80 [ 6.698171] r7 : df9f7ea0 r6 : e6262000 r5 : 00000000 r4 : 00000000 [ 6.704680] r3 : 00000000 r2 : e6262000 r1 : 600f0193 r0 : c05b3750 [ 6.711194] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment kernel [ 6.718485] Control: 10c53c7d Table: 5e46806a DAC: 00000015 [ 6.724218] Process kworker/0:1 (pid: 31, stack limit = 0xdf9f6238) [ 6.730465] Stack: (0xdf9f7d58 to 0xdf9f8000) [ 6.914325] [<c001b7b8>] (show_pte+0x80/0xb8) from [<c047107c>] (__do_kernel_fault.part.9+0x44/0x74) [ 6.923425] [<c047107c>] (__do_kernel_fault.part.9+0x44/0x74) from [<c001bb7c>] (do_page_fault+0x2c4/0x360) [ 6.933144] [<c001bb7c>] (do_page_fault+0x2c4/0x360) from [<c0008400>] (do_DataAbort+0x34/0x9c) [ 6.941825] [<c0008400>] (do_DataAbort+0x34/0x9c) from [<c000e5d8>] (__dabt_svc+0x38/0x60) [ 6.950058] Exception stack(0xdf9f7ea0 to 0xdf9f7ee8) [ 6.955099] 7ea0: df0c1790 00000000 00000002 00000000 df0c1794 df0c1790 df0c1790 00000042 [ 6.963271] 7ec0: df0c1794 00000001 00000000 00000009 00000000 df9f7ee8 c0306268 c0306270 [ 6.971419] 7ee0: a00f0113 ffffffff [ 6.974902] [<c000e5d8>] (__dabt_svc+0x38/0x60) from [<c0306270>] (max17040_work+0x8c/0x144) [ 6.983317] [<c0306270>] (max17040_work+0x8c/0x144) from [<c003f364>] (process_one_work+0x138/0x440) [ 6.992429] [<c003f364>] (process_one_work+0x138/0x440) from [<c003fa64>] (worker_thread+0x134/0x3b8) [ 7.001628] [<c003fa64>] (worker_thread+0x134/0x3b8) from [<c00454bc>] (kthread+0xa4/0xb0) [ 7.009875] [<c00454bc>] (kthread+0xa4/0xb0) from [<c000eb28>] (ret_from_fork+0x14/0x2c) [ 7.017943] Code: e1a03005 e2422480 e0826104 e59f002c (e7922104) [ 7.024017] ---[ end trace 73bc7006b9cc5c79 ]--- Signed-off-by: Krzysztof Kozlowski <k.kozlowski@samsung.com> Fixes: c6f4a42de6 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-02-22 12:41:29 -08:00
..
accessibility
acpi	ACPI / init: Flag use of ACPI and ACPI idioms for power supplies to regulator API	2014-02-13 13:48:00 -08:00
amba
ata	libata: disable LPM for some WD SATA-I devices	2014-02-06 11:08:16 -08:00
atm	atm: idt77252: fix dev refcnt leak	2013-12-08 07:29:25 -08:00
auxdisplay
base	PM / runtime: Use pm_runtime_put_sync() in __device_release_driver()	2013-12-04 10:56:59 -08:00
bcma
block	xen-blkfront: handle backend CLOSED without CLOSING	2014-02-22 12:41:25 -08:00
bluetooth	Bluetooth: Add support for BCM20702A0 [0b05, 17cb]	2013-10-13 16:08:32 -07:00
bus
cdrom	drivers/cdrom/cdrom.c: use kzalloc() for failing hardware	2013-07-13 11:42:26 -07:00
char	raw: test against runtime value of max_raw_minors	2014-02-22 12:41:27 -08:00
clk	clk: exynos5250: fix sysmmu_mfc{l,r} gate clocks	2014-01-15 15:28:52 -08:00
clocksource	clocksource: em_sti: Set cpu_possible_mask to fix SMP broadcast	2014-01-15 15:28:45 -08:00
connector	connector: improved unaligned access error fix	2013-12-08 07:29:25 -08:00
cpufreq	intel_pstate: Correct calculation of min pstate value	2014-02-13 13:48:04 -08:00
cpuidle	cpuidle: coupled: fix race condition between pokes and safe state	2013-09-26 17:18:02 -07:00
crypto	crypto: caam - Fixed the memory out of bound overwrite issue	2013-08-04 16:50:57 +08:00
dca
devfreq
dio
dma	net_dma: mark broken	2014-01-09 12:24:21 -08:00
edac	e752x_edac: Fix pci_dev usage count	2014-02-06 11:08:12 -08:00
eisa	Revert "EISA: Initialize device before its resources"	2014-02-13 13:47:59 -08:00
extcon
firewire	firewire: sbp2: bring back WRITE SAME support	2014-01-09 12:24:21 -08:00
firmware	dmi: add support for exact DMI matches in addition to substring matching	2013-11-29 11:11:53 -08:00
gpio	gpio-rcar: R-Car GPIO IRQ share interrupt	2014-01-15 15:28:45 -08:00
gpu	drm/radeon: fix UVD IRQ support on SI	2014-02-22 12:41:27 -08:00
hid	HID: Revert "Revert "HID: Fix logitech-dj: missing Unifying device issue""	2014-01-15 15:28:45 -08:00
hsi
hv	Drivers: hv: vmbus: Don't timeout during the initial connection with host	2014-02-22 12:41:28 -08:00
hwmon	hwmon: (ntc_thermistor) Avoid math overflow	2014-02-22 12:41:27 -08:00
hwspinlock
i2c	i2c: i801: SMBus patch for Intel Coleto Creek DeviceIDs	2014-02-13 13:48:03 -08:00
ide
idle	x86 idle: Repair large-server 50-watt idle-power regression	2014-01-09 12:24:21 -08:00
iio	iio: adis16400: Set timestamp as the last element in chan_spec	2014-02-22 12:41:27 -08:00
infiniband	IB/qib: Add missing serdes init sequence	2014-02-22 12:41:29 -08:00
input	Input: allocate absinfo data when setting ABS capability	2014-01-09 12:24:24 -08:00
iommu	intel-iommu: fix off-by-one in pagetable freeing	2014-02-13 13:47:59 -08:00
ipack
irqchip	irqchip: armada-370-xp: fix IPI race condition	2014-02-20 11:06:11 -08:00
isdn	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
leds	leds: wm831x-status: Request a REG resource	2013-09-26 17:18:27 -07:00
lguest
macintosh	powerpc/windfarm: Fix noisy slots-fan on Xserve (rm31)	2013-08-11 18:35:20 -07:00
mailbox
md	md/raid5: Fix CPU hotplug callback registration	2014-02-22 12:41:29 -08:00
media	mxl111sf: Fix compile when CONFIG_DVB_USB_MXL111SF is unset	2014-02-20 11:06:11 -08:00
memory
memstick
message
mfd	mfd: lpc_ich: iTCO_wdt patch for Intel Coleto Creek DeviceIDs	2014-02-13 13:48:03 -08:00
misc	mei: don't unset read cb ptr on reset	2014-02-22 12:41:28 -08:00
mmc	mmc: atmel-mci: fix timeout errors in SDIO mode when using DMA	2014-02-13 13:48:00 -08:00
mtd	mtd: mxc_nand: remove duplicated ecc_stats counting	2014-02-13 13:48:00 -08:00
net	iwlwifi: mvm: BT Coex - disable BT when TXing probe request in scan	2014-02-22 12:41:26 -08:00
nfc	NFC: mei: Do not disable MEI devices from their remove routine	2013-05-21 10:48:41 +02:00
ntb	NTB: Correct debugfs to work with more than 1 NTB Device	2013-11-13 12:05:35 +09:00
nubus
of	of: fix PCI bus match for PCIe slots	2014-02-22 12:41:27 -08:00
oprofile
parisc	parisc: Fix interrupt routing for C8000 serial ports	2013-08-11 18:35:21 -07:00
parport	parport: parport_pc: remove double PCI ID for NetMos	2014-02-06 11:08:15 -08:00
pci	PCI: Disable Bus Master only on kexec reboot	2013-12-20 07:45:08 -08:00
pcmcia	pcmcia: at91_cf: fix gpio_get_value in at91_cf_get_status	2013-07-21 18:21:25 -07:00
pinctrl	pinctrl: protect pinctrl_list add	2014-02-20 11:06:11 -08:00
platform	hp_accel: Add a new PnP ID HPQ6007 for new HP laptops	2014-02-06 11:08:16 -08:00
pnp
power	power: max17040: Fix NULL pointer dereference when there is no platform_data	2014-02-22 12:41:29 -08:00
pps
ps3
ptp	ptp_pch: fix error handling in pch_probe()	2013-05-25 21:24:15 -07:00
pwm
rapidio	RAPIDIO: IDT_GEN2: Fix build error.	2013-07-28 16:30:07 -07:00
regulator	mfd: tps6586x: correct device name of the regulator cell	2013-06-24 12:37:47 +01:00
remoteproc
reset
rpmsg
rtc	rtc-cmos: Add an alarm disable quirk	2014-02-13 13:48:03 -08:00
s390	s390/3270: fix allocation of tty3270_screen structure	2014-01-09 12:24:24 -08:00
sbus
scsi	virtio-scsi: Fix hotcpu_notifier use-after-free with virtscsi_freeze	2014-02-06 11:08:17 -08:00
sfi
sh
sn
spi	spi: Fix crash with double message finalisation on error handling	2014-02-22 12:41:26 -08:00
ssb
ssbi
staging	staging:iio:ad799x fix error_free_irq which was freeing an irq that may not have been requested	2014-02-22 12:41:27 -08:00
target	target/iscsi: Fix network portal creation race	2014-02-06 11:08:17 -08:00
tc
thermal
tty	vt: Fix secure clear screen	2014-02-22 12:41:27 -08:00
uio	Fix a few incorrectly checked [io_]remap_pfn_range() calls	2013-11-13 12:05:33 +09:00
usb	Revert "usbcore: set lpm_capable field for LPM capable root hubs"	2014-02-22 12:41:28 -08:00
uwb
vfio	vfio: fix crash on rmmod	2013-06-05 08:54:16 -06:00
vhost	vhost/scsi: Fix incorrect usage of get_user_pages_fast write parameter	2013-11-13 12:05:32 +09:00
video	video: kyro: fix incorrect sizes when copying to userspace	2013-12-08 07:29:27 -08:00
virt
virtio	virtio: support unlocked queue poll	2013-07-28 16:29:55 -07:00
vlynq
vme	VME: Correct read/write alignment algorithm	2014-02-22 12:41:28 -08:00
w1
watchdog	sc1200_wdt: Fix oops	2013-12-20 07:45:11 -08:00
xen	xen/gnttab: leave lazy MMU mode in the case of a m2p override failure	2013-12-11 22:36:27 -08:00
zorro
Kconfig
Makefile