soc: apple: rtkit: Pass 0 as size for a NULL crashlog buffer

jannau · jannau · commit 196352129bc4 · 2026-03-01T17:33:42.000+01:00
The crashlog size is not useful for the crashed() callback callee if the
passed buffer is NULL. To reduce the risk of NULL pointer derefences in
callees use size 0 in this case.

Signed-off-by: Janne Grunau &lt;j@jannau.net&gt;
diff --git a/drivers/soc/apple/rtkit.c b/drivers/soc/apple/rtkit.c
@@ -394,7 +394,7 @@ static void apple_rtkit_crashlog_rx(struct apple_rtkit *rtk, u64 msg)
 
 	rtk->crashed = true;
 	if (rtk->ops->crashed)
-		rtk->ops->crashed(rtk->cookie, bfr, rtk->crashlog_buffer.size);
+		rtk->ops->crashed(rtk->cookie, bfr, bfr ? rtk->crashlog_buffer.size : 0);
 }
 
 static void apple_rtkit_ioreport_rx(struct apple_rtkit *rtk, u64 msg)

Original file line number	Diff line number	Diff line change
`@@ -394,7 +394,7 @@ static void apple_rtkit_crashlog_rx(struct apple_rtkit *rtk, u64 msg)`
`394`	`394`
`395`	`395`	`rtk->crashed = true;`
`396`	`396`	`if (rtk->ops->crashed)`
`397`		`- rtk->ops->crashed(rtk->cookie, bfr, rtk->crashlog_buffer.size);`
	`397`	`+ rtk->ops->crashed(rtk->cookie, bfr, bfr ? rtk->crashlog_buffer.size : 0);`
`398`	`398`	`}`
`399`	`399`
`400`	`400`	`static void apple_rtkit_ioreport_rx(struct apple_rtkit *rtk, u64 msg)`