From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ville =?iso-8859-1?Q?Syrj=E4l=E4?= Subject: Re: [PATCH 2/3] drm/i915/sdvo: Robustify the dtd<->drm_mode conversions Date: Tue, 10 Sep 2013 14:00:27 +0300 Message-ID: <20130910110027.GM11428@intel.com> References: <1378807612-18399-1-git-send-email-daniel.vetter@ffwll.ch> <1378807612-18399-2-git-send-email-daniel.vetter@ffwll.ch> <20130910102620.GL11428@intel.com> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Return-path: Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) by gabe.freedesktop.org (Postfix) with ESMTP id 30EF4E5D76 for ; Tue, 10 Sep 2013 04:00:31 -0700 (PDT) Content-Disposition: inline In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: intel-gfx-bounces+gcfxdi-intel-gfx=m.gmane.org@lists.freedesktop.org Errors-To: intel-gfx-bounces+gcfxdi-intel-gfx=m.gmane.org@lists.freedesktop.org To: Daniel Vetter Cc: Intel Graphics Development List-Id: intel-gfx@lists.freedesktop.org On Tue, Sep 10, 2013 at 12:50:25PM +0200, Daniel Vetter wrote: > On Tue, Sep 10, 2013 at 12:26 PM, Ville Syrj=E4l=E4 > wrote: > >> static void intel_sdvo_get_mode_from_dtd(struct drm_display_mode * mo= de, > >> const struct intel_sdvo_dtd *dt= d) > >> { > >> + memset(mode, 0, sizeof(*mode)); > > > > I have a theoretical worry that someone might end up calling this on a > > mode that sits on some list or was actually allocated and has a proper > > object id which we'd leak here. > > > > To make it totally safe you could populate a pristine mode struct and > > use drm_mode_copy() to overwrite adjusted_mode. Assuming we're not so > > short on stack space that our oversized mode struct would cause issues. > > Other options would be to add some WARNs to catch wrongdoers, or embed > > a temp mode for this purpose inside the intel_sdvo struct. > = > We can't really check for this since list_empty on stack garbage won't > work too well, either. And e.g. ->get_config has the pipe config on > the stack. So I think we just need to do review here. I also think the > risk is pretty low, this is all used in internal structures around > pipe_config, where the mode is never linked. Well, another idea would be to add drm_mode_clear() what would do the memset() but preserve the id and list head. -- = Ville Syrj=E4l=E4 Intel OTC