From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jani Nikula Subject: Re: [PATCH] drm/i915/ppgtt: Prevent NULL deref in reset ioctl Date: Fri, 20 Dec 2013 16:37:34 +0200 Message-ID: <871u17k2q9.fsf@intel.com> References: <1387495360-15114-1-git-send-email-benjamin.widawsky@intel.com> <20131220065556.GA31581@bwidawsk.net> <20131220141044.GA23400@phenom.ffwll.local> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mga01.intel.com (mga01.intel.com [192.55.52.88]) by gabe.freedesktop.org (Postfix) with ESMTP id 043D1FA30D for ; Fri, 20 Dec 2013 06:35:37 -0800 (PST) In-Reply-To: <20131220141044.GA23400@phenom.ffwll.local> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: intel-gfx-bounces@lists.freedesktop.org Errors-To: intel-gfx-bounces@lists.freedesktop.org To: Daniel Vetter , Ben Widawsky Cc: Intel GFX , Ben Widawsky List-Id: intel-gfx@lists.freedesktop.org On Fri, 20 Dec 2013, Daniel Vetter wrote: > On Thu, Dec 19, 2013 at 10:55:56PM -0800, Ben Widawsky wrote: >> On Fri, Dec 20, 2013 at 07:05:10AM +0100, Daniel Vetter wrote: >> > On Fri, Dec 20, 2013 at 12:22 AM, Ben Widawsky >> > wrote: >> > > ctx = i915_gem_context_get(file->driver_priv, args->ctx_id); >> > > - if (IS_ERR(ctx)) { >> > > + if (IS_ERR_OR_NULL(ctx)) { >> > >> > We now have half the callers check for IS_ERR and the others not. >> > Afaics i915_gem_context_get can only return NULL or a real context >> > though. Also from a quite read the expected error for a lookup failure >> > is ENOENT (and there seems to be a testcase for this). >> > -Daniel >> >> >> To your first point: >> I think checking null is always the right thing currently, but for >> future proofing, IS_ERR_OR_NULL is really the right thing. After his >> patch, I believe only i915_gem_context_destroy_ioctl is still incorrect. > > Using IS_ERR_OR_NULL on a return value which can never contain an > encoded errno value is imo confusing, more so when it's inconsitently > applied. Moreover, the error path then goes on to return 0 for success when the pointer is NULL. BR, Jani. -- Jani Nikula, Intel Open Source Technology Center