linux-kernel - Re: [PATCH RESEND] kunit: debugfs: Fix unchecked dereference in debugfs_print

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CA+GJov73iw=Z=KibZ6QtAHRZQ4aaoodx=dan1gBSYnsP2vf9Hw@mail.gmail.com>
Date:   Thu, 30 Nov 2023 15:57:45 -0500
From:   Rae Moar <rmoar@...gle.com>
To:     Richard Fitzgerald <rf@...nsource.cirrus.com>
Cc:     brendan.higgins@...ux.dev, davidgow@...gle.com,
        linux-kselftest@...r.kernel.org, kunit-dev@...glegroups.com,
        linux-kernel@...r.kernel.org, patches@...nsource.cirrus.com,
        Dan Carpenter <dan.carpenter@...aro.org>
Subject: Re: [PATCH RESEND] kunit: debugfs: Fix unchecked dereference in debugfs_print_results()

On Mon, Oct 30, 2023 at 6:48 AM Richard Fitzgerald
<rf@...nsource.cirrus.com> wrote:
>
> Move the call to kunit_suite_has_succeeded() after the check that
> the kunit_suite pointer is valid.
>
> This was found by smatch:
>
>  lib/kunit/debugfs.c:66 debugfs_print_results() warn: variable
>  dereferenced before check 'suite' (see line 63)
>
> Signed-off-by: Richard Fitzgerald <rf@...nsource.cirrus.com>
> Reported-by: Dan Carpenter <dan.carpenter@...aro.org>
> Fixes: 38289a26e1b8 ("kunit: fix debugfs code to use enum kunit_status, not bool")

Hello!

This patch looks good to me! Thanks for fixing this!

Reviewed-by: Rae Moar <rmoar@...gle.com>

-Rae

> ---
>  lib/kunit/debugfs.c | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/lib/kunit/debugfs.c b/lib/kunit/debugfs.c
> index 9d167adfa746..382706dfb47d 100644
> --- a/lib/kunit/debugfs.c
> +++ b/lib/kunit/debugfs.c
> @@ -60,12 +60,14 @@ static void debugfs_print_result(struct seq_file *seq, struct string_stream *log
>  static int debugfs_print_results(struct seq_file *seq, void *v)
>  {
>         struct kunit_suite *suite = (struct kunit_suite *)seq->private;
> -       enum kunit_status success = kunit_suite_has_succeeded(suite);
> +       enum kunit_status success;
>         struct kunit_case *test_case;
>
>         if (!suite)
>                 return 0;
>
> +       success = kunit_suite_has_succeeded(suite);
> +
>         /* Print KTAP header so the debugfs log can be parsed as valid KTAP. */
>         seq_puts(seq, "KTAP version 1\n");
>         seq_puts(seq, "1..1\n");
> --
> 2.30.2
>