linux-kernel - Re: [patch] generic-adc-battery: forever loop in gab

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAK7N6vqEp-v1ykJvWQQpo3BLuw3AkSKD-P2mLGGOFRWmx4JJDA@mail.gmail.com>
Date:	Thu, 14 Feb 2013 14:07:25 +0530
From:	anish singh <anish198519851985@...il.com>
To:	Dan Carpenter <dan.carpenter@...cle.com>
Cc:	Anton Vorontsov <cbou@...l.ru>,
	David Woodhouse <dwmw2@...radead.org>,
	linux-kernel@...r.kernel.org, kernel-janitors@...r.kernel.org
Subject: Re: [patch] generic-adc-battery: forever loop in gab_remove()

On Thu, Feb 14, 2013 at 2:06 PM, anish singh
<anish198519851985@...il.com> wrote:
> On Thu, Feb 14, 2013 at 12:56 PM, Dan Carpenter
> <dan.carpenter@...cle.com> wrote:
>> There is a forever loop calling iio_channel_release() because the
>> "chan < " part of the "chan < ARRAY_SIZE()" is missing.  This is in both
>> the error handling on probe and also in the remove function.
>>
>> The other thing is that it's possible for some of the elements of the
>> adc_bat->channel[chan] array to be an ERR_PTR().  I've changed them to
>> be NULL instead.  We're still not allowed to pass NULLs to
>> iio_channel_release() so I've added a check.
>>
>> Finally, I removed an unused "chan = ARRAY_SIZE(gab_chan_name);"
>> statement as a small cleanup.
>>
>> Signed-off-by: Dan Carpenter <dan.carpenter@...cle.com>
I think this will be picked by Anton.
>
>>
>> diff --git a/drivers/power/generic-adc-battery.c b/drivers/power/generic-adc-battery.c
>> index 42733c4..8cb5d7f 100644
>> --- a/drivers/power/generic-adc-battery.c
>> +++ b/drivers/power/generic-adc-battery.c
>> @@ -263,9 +263,6 @@ static int gab_probe(struct platform_device *pdev)
>>         psy->external_power_changed = gab_ext_power_changed;
>>         adc_bat->pdata = pdata;
>>
>> -       /* calculate the total number of channels */
>> -       chan = ARRAY_SIZE(gab_chan_name);
>> -
>>         /*
>>          * copying the static properties and allocating extra memory for holding
>>          * the extra configurable properties received from platform data.
>> @@ -291,6 +288,7 @@ static int gab_probe(struct platform_device *pdev)
>>                                                          gab_chan_name[chan]);
>>                 if (IS_ERR(adc_bat->channel[chan])) {
>>                         ret = PTR_ERR(adc_bat->channel[chan]);
>> +                       adc_bat->channel[chan] = NULL;
>>                 } else {
>>                         /* copying properties for supported channels only */
>>                         memcpy(properties + sizeof(*(psy->properties)) * index,
>> @@ -344,8 +342,10 @@ err_gpio:
>>  gpio_req_fail:
>>         power_supply_unregister(psy);
>>  err_reg_fail:
>> -       for (chan = 0; ARRAY_SIZE(gab_chan_name); chan++)
>> -               iio_channel_release(adc_bat->channel[chan]);
>> +       for (chan = 0; chan < ARRAY_SIZE(gab_chan_name); chan++) {
>> +               if (adc_bat->channel[chan])
>> +                       iio_channel_release(adc_bat->channel[chan]);
>> +       }
>>  second_mem_fail:
>>         kfree(psy->properties);
>>  first_mem_fail:
>> @@ -365,8 +365,10 @@ static int gab_remove(struct platform_device *pdev)
>>                 gpio_free(pdata->gpio_charge_finished);
>>         }
>>
>> -       for (chan = 0; ARRAY_SIZE(gab_chan_name); chan++)
>> -               iio_channel_release(adc_bat->channel[chan]);
>> +       for (chan = 0; chan < ARRAY_SIZE(gab_chan_name); chan++) {
>> +               if (adc_bat->channel[chan])
>> +                       iio_channel_release(adc_bat->channel[chan]);
>> +       }
>>
>>         kfree(adc_bat->psy.properties);
>>         cancel_delayed_work(&adc_bat->bat_work);
>> --
>> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
>> the body of a message to majordomo@...r.kernel.org
>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>> Please read the FAQ at  http://www.tux.org/lkml/
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/