staging: ccree: handle end of sg list gracefully
authorGilad Ben-Yossef <gilad@benyossef.com>
Sun, 7 Jan 2018 12:14:25 +0000 (12:14 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 8 Jan 2018 15:27:23 +0000 (16:27 +0100)
If we are asked for number of entries of an offset bigger than the
sg list we should not crash.

Cc: stable@vger.kernel.org
Signed-off-by: Gilad Ben-Yossef <gilad@benyossef.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/ccree/ssi_buffer_mgr.c

index 78288ed75281eff6a4710ca28dca85108f9514d3..0f7126404a32cb1b5e47ec87e743e526d18f7d7f 100644 (file)
@@ -94,7 +94,7 @@ static unsigned int cc_get_sgl_nents(struct device *dev,
 {
        unsigned int nents = 0;
 
-       while (nbytes) {
+       while (nbytes && sg_list) {
                if (sg_list->length) {
                        nents++;
                        /* get the number of bytes in the last entry */