Commit bb3d4573 authored by Sean Young's avatar Sean Young Committed by Greg Kroah-Hartman

media: af9005: uninitialized variable printked

commit 51d0c99b upstream.

If usb_bulk_msg() fails, actual_length can be uninitialized.

Reported-by: syzbot+9d42b7773d2fecd983ab@syzkaller.appspotmail.com
Signed-off-by: default avatarSean Young <sean@mess.org>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 12466938
...@@ -563,7 +563,7 @@ static int af9005_boot_packet(struct usb_device *udev, int type, u8 *reply, ...@@ -563,7 +563,7 @@ static int af9005_boot_packet(struct usb_device *udev, int type, u8 *reply,
u8 *buf, int size) u8 *buf, int size)
{ {
u16 checksum; u16 checksum;
int act_len, i, ret; int act_len = 0, i, ret;
memset(buf, 0, size); memset(buf, 0, size);
buf[0] = (u8) (FW_BULKOUT_SIZE & 0xff); buf[0] = (u8) (FW_BULKOUT_SIZE & 0xff);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment