| From 86e30e36f11aacb3686ae926ea894b21a155120c Mon Sep 17 00:00:00 2001 |
| From: Sean Young <sean@mess.org> |
| Date: Sun, 10 Nov 2019 11:15:37 +0100 |
| Subject: [PATCH] media: af9005: uninitialized variable printked |
| |
| commit 51d0c99b391f0cac61ad7b827c26f549ee55672c upstream. |
| |
| If usb_bulk_msg() fails, actual_length can be uninitialized. |
| |
| Reported-by: syzbot+9d42b7773d2fecd983ab@syzkaller.appspotmail.com |
| Signed-off-by: Sean Young <sean@mess.org> |
| Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org> |
| Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> |
| |
| diff --git a/drivers/media/usb/dvb-usb/af9005.c b/drivers/media/usb/dvb-usb/af9005.c |
| index ac93e88d7038..89b4b5d84cdf 100644 |
| --- a/drivers/media/usb/dvb-usb/af9005.c |
| +++ b/drivers/media/usb/dvb-usb/af9005.c |
| @@ -554,7 +554,7 @@ static int af9005_boot_packet(struct usb_device *udev, int type, u8 *reply, |
| u8 *buf, int size) |
| { |
| u16 checksum; |
| - int act_len, i, ret; |
| + int act_len = 0, i, ret; |
| |
| memset(buf, 0, size); |
| buf[0] = (u8) (FW_BULKOUT_SIZE & 0xff); |
| -- |
| 2.7.4 |
| |
