linux-kernel - Re: Complete report of Null dereference errors in kernel 2.6.17.1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <44CB9F11.6080508@s5r6.in-berlin.de>
Date:	Sat, 29 Jul 2006 19:46:57 +0200
From:	Stefan Richter <stefanr@...6.in-berlin.de>
To:	Tom Walter Dillig <tdillig@...nford.edu>
CC:	linux-kernel@...r.kernel.org, w@....eul,
	kernel_org@...italpeer.com, security@...nel.org
Subject: Re: Complete report of Null dereference errors in kernel 2.6.17.1

Tom Walter Dillig wrote on 2006-07-25:
> [276]
> 1043, 1051, 1075, 1083, 1091, ... drivers/ieee1394/sbp2.c
> Possible null dereference of variable "hi" checked at
> (1096:drivers/ieee1394/sbp2.c).

Thanks for the report.

"hi" is guaranteed to be nonzero and valid at these places. The 
safeguards are the if clauses in lines 1042, 1050, 1074, 1082, 1090. 
Their conditions will evaluate to false if "hi" was NULL. This is 
because of the order of how members of struct scsi_id_instance_data are 
initialized in sbp2_alloc_device() and sbp2_start_device().

What other potential errors did your checker find in 
drivers/ieee1394/sbp2.c?
-- 
Stefan Richter
-=====-=-==- -=== ===-=
http://arcgraph.de/sr/
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/