linux-kernel - Re: [PATCH 15/20] staging/lustre/libcfs: get rid of debugfs/lnet/console

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 8 Jul 2015 09:43:48 -0400
From:	Oleg Drokin <green@...uxhacker.ru>
To:	Dan Carpenter <dan.carpenter@...cle.com>
Cc:	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	devel@...verdev.osuosl.org,
	Andreas Dilger <andreas.dilger@...el.com>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH 15/20] staging/lustre/libcfs: get rid of debugfs/lnet/console_backoff


On Jul 8, 2015, at 4:28 AM, Dan Carpenter wrote:

> On Mon, Jul 06, 2015 at 12:48:53PM -0400, green@...uxhacker.ru wrote:
>> +static int param_set_uint_minmax(const char *val,
>> +				 const struct kernel_param *kp,
>> +				 unsigned int min, unsigned int max)
>> +{
>> +	unsigned int num;
>> +	int ret;
>> +
>> +	if (!val)
>> +		return -EINVAL;
>> +	ret = kstrtouint(val, 0, &num);
>> +	if (ret == -EINVAL || num < min || num > max)
>                              ^^^
> Smatch is smart enough to know that "num" can be uninitialized here on
> some paths.  It doesn't generate a warning yet because a lot of the
> kernel has error paths where we mostly assume things won't fail.
> 
> It should probably be:
> 
> 	ret = kstrtouint(val, 0, &num);
> 	if (ret)
> 		return ret;
> 	if (num < min || num > max)
> 		return -EINVAL;

Hm, indeed kstrtouint can return errors other than -EINVAL.
In reality this code comes from net/sunrpc/xprtsock.c
and I failed to see the problem there while copying.

This also suggests that the type is might be enough in demand
to make it generic so that people don't reimplement it themselves?

Thanks!

Bye,
    Oleg

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/