linux-media.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Dan Carpenter <dan.carpenter@oracle.com>
To: s.nawrocki@samsung.com
Cc: linux-media@vger.kernel.org, linux-samsung-soc@vger.kernel.org
Subject: re: [media] exynos4-is: Add the FIMC-IS ISP capture DMA driver
Date: Thu, 2 Oct 2014 15:16:26 +0300	[thread overview]
Message-ID: <20141002121626.GA689@mwanda> (raw)

Hello Sylwester Nawrocki,

The patch 34947b8aebe3: "[media] exynos4-is: Add the FIMC-IS ISP
capture DMA driver" from Dec 20, 2013, leads to the following static
checker warning:

	drivers/media/platform/exynos4-is/fimc-isp-video.c:413 isp_video_try_fmt_mplane()
	error: NULL dereference inside function.

drivers/media/platform/exynos4-is/fimc-isp-video.c
   388  static void __isp_video_try_fmt(struct fimc_isp *isp,
   389                                  struct v4l2_pix_format_mplane *pixm,
   390                                  const struct fimc_fmt **fmt)
   391  {
   392          *fmt = fimc_isp_find_format(&pixm->pixelformat, NULL, 2);

"fmt" isn't allowed to be NULL.

   393  
   394          pixm->colorspace = V4L2_COLORSPACE_SRGB;
   395          pixm->field = V4L2_FIELD_NONE;
   396          pixm->num_planes = (*fmt)->memplanes;
   397          pixm->pixelformat = (*fmt)->fourcc;
   398          /*
   399           * TODO: double check with the docmentation these width/height
   400           * constraints are correct.
   401           */
   402          v4l_bound_align_image(&pixm->width, FIMC_ISP_SOURCE_WIDTH_MIN,
   403                                FIMC_ISP_SOURCE_WIDTH_MAX, 3,
   404                                &pixm->height, FIMC_ISP_SOURCE_HEIGHT_MIN,
   405                                FIMC_ISP_SOURCE_HEIGHT_MAX, 0, 0);
   406  }
   407  
   408  static int isp_video_try_fmt_mplane(struct file *file, void *fh,
   409                                          struct v4l2_format *f)
   410  {
   411          struct fimc_isp *isp = video_drvdata(file);
   412  
   413          __isp_video_try_fmt(isp, &f->fmt.pix_mp, NULL);
                                                         ^^^^
NULL dereference here.

   414          return 0;
   415  }

regards,
dan carpenter

             reply	other threads:[~2014-10-02 12:16 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-10-02 12:16 Dan Carpenter [this message]
  -- strict thread matches above, loose matches on Subject: below --
2014-05-08 13:16 [media] exynos4-is: Add the FIMC-IS ISP capture DMA driver Dan Carpenter

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20141002121626.GA689@mwanda \
    --to=dan.carpenter@oracle.com \
    --cc=linux-media@vger.kernel.org \
    --cc=linux-samsung-soc@vger.kernel.org \
    --cc=s.nawrocki@samsung.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).