linux-kernel - Re: [PATCH] scsi_dh_emc: fix uninitialized return value ret

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <5890846C.50406@bfs.de>
Date:   Tue, 31 Jan 2017 13:34:52 +0100
From:   walter harms <wharms@....de>
To:     Colin King <colin.king@...onical.com>
CC:     "James E . J . Bottomley" <jejb@...ux.vnet.ibm.com>,
        "Martin K . Petersen" <martin.petersen@...cle.com>,
        Jens Axboe <axboe@...com>, Hannes Reinecke <hare@...e.de>,
        Shaun Tancheff <shaun.tancheff@...gate.com>,
        Johannes Thumshirn <jthumshirn@...e.de>,
        linux-scsi@...r.kernel.org, kernel-janitors@...r.kernel.org,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH] scsi_dh_emc: fix uninitialized return value ret



Am 31.01.2017 13:22, schrieb Colin King:
> From: Colin Ian King <colin.king@...onical.com>
> 
> ret is uninitialized on a successful execution of clarrion_std_inquiry
> and a garbage return value is being returted.  Fix this by setting ret
> to zero on the success exit path.
> 
> Found by CoverityScan, CID#1398889 ("Uninitialized scaler variable")
> 
> Fixes: b78205c93297b8219 ("scsi_dh_emc: switch to scsi_execute_req_flags()")
> Signed-off-by: Colin Ian King <colin.king@...onical.com>
> ---
>  drivers/scsi/device_handler/scsi_dh_emc.c | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/drivers/scsi/device_handler/scsi_dh_emc.c b/drivers/scsi/device_handler/scsi_dh_emc.c
> index 4a7679f..6647da2 100644
> --- a/drivers/scsi/device_handler/scsi_dh_emc.c
> +++ b/drivers/scsi/device_handler/scsi_dh_emc.c
> @@ -376,6 +376,7 @@ static int clariion_std_inquiry(struct scsi_device *sdev,
>  	sdev_printk(KERN_INFO, sdev,
>  		    "%s: detected Clariion %s, flags %x\n",
>  		    CLARIION_NAME, sp_model, csdev->flags);
> +	err = 0;
>  out:
>  	return err;
>  }



I am not sure IMHO err is set in the first line  err = send_inquiry_cmd(sdev, 0, csdev);

but this looks strange:
  if (!strlen(sp_model) || !strncmp(sp_model, "FC",2))
IMHO we can drop strlen() and the compare should be agaist:
 #define emc_default_str "FC (Legacy)"

just my 2 cents,

re,
 wh