linux-media.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Dan Carpenter <dan.carpenter@oracle.com>
To: alan@linux.intel.com
Cc: linux-media@vger.kernel.org
Subject: [bug report] staging/atomisp: Add support for the Intel IPU v2
Date: Mon, 13 Mar 2017 15:34:45 +0300	[thread overview]
Message-ID: <20170313123445.GA9464@mwanda> (raw)

Hello Alan Cox,

The patch a49d25364dfb: "staging/atomisp: Add support for the Intel
IPU v2" from Feb 17, 2017, leads to the following static checker
warning:

	drivers/staging/media/atomisp/platform/intel-mid/atomisp_gmin_platform.c:676 gmin_get_config_var()
	warn: impossible condition '(*out_len > (~0)) => (0-u64max > u64max)'

drivers/staging/media/atomisp/platform/intel-mid/atomisp_gmin_platform.c
   620  /* Retrieves a device-specific configuration variable.  The dev
   621   * argument should be a device with an ACPI companion, as all
   622   * configuration is based on firmware ID. */
   623  int gmin_get_config_var(struct device *dev, const char *var, char *out, size_t *out_len)

out_len is a size_t which is always a ulong.

   624  {
   625          char var8[CFG_VAR_NAME_MAX];
   626          efi_char16_t var16[CFG_VAR_NAME_MAX];
   627          struct efivar_entry *ev;
   628          u32 efiattr_dummy;
   629          int i, j, ret;
   630          unsigned long efilen;
   631  
   632          if (dev && ACPI_COMPANION(dev))
   633                  dev = &ACPI_COMPANION(dev)->dev;
   634  
   635          if (dev)
   636                  ret = snprintf(var8, sizeof(var8), "%s_%s", dev_name(dev), var);
   637          else
   638                  ret = snprintf(var8, sizeof(var8), "gmin_%s", var);
   639  
   640          if (ret < 0 || ret >= sizeof(var8)-1)
   641                  return -EINVAL;
   642  
   643          /* First check a hard-coded list of board-specific variables.
   644           * Some device firmwares lack the ability to set EFI variables at
   645           * runtime. */
   646          for (i = 0; i < ARRAY_SIZE(hard_vars); i++) {
   647                  if (dmi_match(DMI_BOARD_NAME, hard_vars[i].dmi_board_name)) {
   648                          for (j = 0; hard_vars[i].vars[j].name; j++) {
   649                                  size_t vl;
   650                                  const struct gmin_cfg_var *gv;
   651  
   652                                  gv = &hard_vars[i].vars[j];
   653                                  vl = strlen(gv->val);
   654  
   655                                  if (strcmp(var8, gv->name))
   656                                          continue;
   657                                  if (vl > *out_len-1)
   658                                          return -ENOSPC;
   659  
   660                                  memcpy(out, gv->val, min(*out_len, vl+1));
   661                                  out[*out_len-1] = 0;
   662                                  *out_len = vl;
   663  
   664                                  return 0;
   665                          }
   666                  }
   667          }
   668  
   669          /* Our variable names are ASCII by construction, but EFI names
   670           * are wide chars.  Convert and zero-pad. */
   671          memset(var16, 0, sizeof(var16));
   672          for (i=0; var8[i] && i < sizeof(var8); i++)
   673                  var16[i] = var8[i];
   674  
   675          /* To avoid owerflows when calling the efivar API */
   676          if (*out_len > ULONG_MAX)
                    ^^^^^^^^^^^^^^^^^^^^
This is impossible.  Was UINT_MAX intended?

   677                  return -EINVAL;
   678  

regards,
dan carpenter

             reply	other threads:[~2017-03-13 12:35 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-03-13 12:34 Dan Carpenter [this message]
2017-03-20 14:07 ` [bug report] staging/atomisp: Add support for the Intel IPU v2 Alan Cox

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20170313123445.GA9464@mwanda \
    --to=dan.carpenter@oracle.com \
    --cc=alan@linux.intel.com \
    --cc=linux-media@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).