From mboxrd@z Thu Jan 1 00:00:00 1970 From: Julia Lawall Date: Wed, 04 Jun 2014 15:06:44 +0000 Subject: Re: [PATCH 6/10] hpsa: use safer test on the result of find_first_zero_bit Message-Id: List-Id: References: <1401872880-23685-1-git-send-email-Julia.Lawall@lip6.fr> <1401872880-23685-7-git-send-email-Julia.Lawall@lip6.fr> <20140604145407.GD6970@beardog.cce.hp.com> In-Reply-To: <20140604145407.GD6970@beardog.cce.hp.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: scameron@beardog.cce.hp.com Cc: Julia Lawall , kernel-janitors@vger.kernel.org, "James E.J. Bottomley" , iss_storagedev@hp.com, linux-scsi@vger.kernel.org, linux-kernel@vger.kernel.org On Wed, 4 Jun 2014, scameron@beardog.cce.hp.com wrote: > On Wed, Jun 04, 2014 at 11:07:56AM +0200, Julia Lawall wrote: > > From: Julia Lawall > > > > Find_first_zero_bit considers BITS_PER_LONG bits at a time, and thus may > > return a larger number than the maximum position argument if that position > > is not a multiple of BITS_PER_LONG. > > > > The semantic match that finds this problem is as follows: > > (http://coccinelle.lip6.fr/) > > > > // > > @@ > > expression e1,e2,e3; > > statement S1,S2; > > @@ > > > > e1 = find_first_zero_bit(e2,e3) > > ... > > if (e1 > > - = > > + >> > e3) > > S1 else S2 > > // > > > > Signed-off-by: Julia Lawall > > > > --- > > drivers/scsi/hpsa.c | 2 +- > > 1 file changed, 1 insertion(+), 1 deletion(-) > > > > diff -u -p a/drivers/scsi/hpsa.c b/drivers/scsi/hpsa.c > > --- a/drivers/scsi/hpsa.c > > +++ b/drivers/scsi/hpsa.c > > @@ -4703,7 +4703,7 @@ static struct CommandList *cmd_alloc(str > > spin_lock_irqsave(&h->lock, flags); > > do { > > i = find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds); > > - if (i = h->nr_cmds) { > > + if (i >= h->nr_cmds) { > > spin_unlock_irqrestore(&h->lock, flags); > > return NULL; > > } > > Thanks, Ack. > > You can add > > Reviewed-by: Stephen M. Cameron > > to this patch if you want. > > You might also consider adding "Cc: stable@vger.kernel.org" to the sign-off area. Actually, it seems that the function can never overshoot the specified limit. So the change is not needed. julia