diff --git a/security/tomoyo/common.c b/security/tomoyo/common.c
index e6970a69c20c03186ee7d3e5726cff226513d3ef..cf3f90ed78384ee8bf93c975daafa4645ae6db76 100644
--- a/security/tomoyo/common.c
+++ b/security/tomoyo/common.c
@@ -2586,7 +2586,7 @@ ssize_t tomoyo_write_control(struct tomoyo_io_buffer *head,
 {
 	int error = buffer_len;
 	size_t avail_len = buffer_len;
-	char *cp0 = head->write_buf;
+	char *cp0;
 	int idx;
 	if (!head->write)
 		return -ENOSYS;
@@ -2594,6 +2594,7 @@ ssize_t tomoyo_write_control(struct tomoyo_io_buffer *head,
 		return -EFAULT;
 	if (mutex_lock_interruptible(&head->io_sem))
 		return -EINTR;
+	cp0 = head->write_buf;
 	head->read_user_buf_avail = 0;
 	idx = tomoyo_read_lock();
 	/* Read a line and dispatch it to the policy handler. */