chdev_driver: Avoid NULL pointer dereference when bch->refs == 255. From Juha Niskanen

2015-03-12 07:58:36 -06:00 · 2015-03-12 07:58:36 -06:00 · dba41a7048
parent 26b9b5a252
commit dba41a7048
1 changed files with 1 additions and 1 deletions
--- a/drivers/bch/bchdev_driver.c
+++ b/drivers/bch/bchdev_driver.c
@ -307,7 +307,7 @@ static int bch_ioctl(FAR struct file *filep, int cmd, unsigned long arg)
      FAR struct bchlib_s **bchr = (FAR struct bchlib_s **)((uintptr_t)arg);

      bchlib_semtake(bch);
-      if (!bchr && bch->refs < 255)
+      if (!bchr || bch->refs == MAX_OPENCNT)
        {
          ret = -EINVAL;
        }