linux-kernel - Re: [PATCH] misc: isl29020: fix signedness bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20101029151710.de349042.akpm@linux-foundation.org>
Date:	Fri, 29 Oct 2010 15:17:10 -0700
From:	Andrew Morton <akpm@...ux-foundation.org>
To:	Vasiliy Kulikov <segooon@...il.com>
Cc:	kernel-janitors@...r.kernel.org, Liu Hong <hong.liu@...el.com>,
	Kalhan Trisal <kalhan.trisal@...el.com>,
	Arjan van de Ven <arjan@...ux.intel.com>,
	Alan Cox <alan@...ux.intel.com>, linux-kernel@...r.kernel.org
Subject: Re: [PATCH] misc: isl29020: fix signedness bug

On Thu, 28 Oct 2010 15:14:03 +0400
Vasiliy Kulikov <segooon@...il.com> wrote:

> i2c_smbus_write_byte_data() may return negative error code.  This is not
> seen to als_sensing_range_store() as the result is stored in unsigned int.
> Made it signed.
> 
> Signed-off-by: Vasiliy Kulikov <segooon@...il.com>
> ---
>  Compile tested.
> 
>  drivers/misc/isl29020.c |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
> 
> diff --git a/drivers/misc/isl29020.c b/drivers/misc/isl29020.c
> index 34fe835..629d31e 100644
> --- a/drivers/misc/isl29020.c
> +++ b/drivers/misc/isl29020.c
> @@ -87,7 +87,7 @@ static ssize_t als_sensing_range_store(struct device *dev,
>  		struct device_attribute *attr, const  char *buf, size_t count)
>  {
>  	struct i2c_client *client = to_i2c_client(dev);
> -	unsigned int ret_val;
> +	int ret_val;
>  	unsigned long val;
>  
>  	if (strict_strtoul(buf, 10, &val))

yup.

It also needs this:



drivers/misc/isl29020.c: don't ignore the i2c_smbus_read_byte_data() return value

From: Andrew Morton <akpm@...ux-foundation.org>

If i2c_smbus_read_byte_data() fails, this driver will write a mangled
errno value into the hardware.

Cc: Vasiliy Kulikov <segooon@...il.com>
Cc: Liu Hong <hong.liu@...el.com>
Cc: Kalhan Trisal <kalhan.trisal@...el.com>
Cc: Arjan van de Ven <arjan@...ux.intel.com>
Cc: Alan Cox <alan@...ux.intel.com>
Signed-off-by: Andrew Morton <akpm@...ux-foundation.org>
---

 drivers/misc/isl29020.c |    4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff -puN drivers/misc/isl29020.c~a drivers/misc/isl29020.c
--- a/drivers/misc/isl29020.c~a
+++ a/drivers/misc/isl29020.c
@@ -106,8 +106,10 @@ static ssize_t als_sensing_range_store(s
 		val = 4;
 
 	ret_val = i2c_smbus_read_byte_data(client, 0x00);
+	if (ret_val < 0)
+		return ret_val;
 
-	ret_val &= 0xFC; /*reset the bit before setting them */
+	ret_val &= 0xFC; /* reset the bit before setting them */
 	ret_val |= val - 1;
 	ret_val = i2c_smbus_write_byte_data(client, 0x00, ret_val);
 
_

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/