Linux wireless drivers development
 help / color / mirror / Atom feed
From: "Grumbach, Emmanuel" <emmanuel.grumbach@intel.com>
To: Dan Carpenter <dan.carpenter@oracle.com>
Cc: "linux-wireless@vger.kernel.org" <linux-wireless@vger.kernel.org>
Subject: RE: iwlwifi: mvm: new BT Coex API
Date: Sat, 2 Nov 2013 19:35:27 +0000	[thread overview]
Message-ID: <0BA3FCBA62E2DC44AF3030971E174FB301DE6409@HASMSX103.ger.corp.intel.com> (raw)
In-Reply-To: <20131101102702.GH29795@longonot.mountain>

> 
> Hello Emmanuel Grumbach,
> 
> This is a semi-automatic email about new static checker warnings.
> 
> The patch dac94da8dba3: "iwlwifi: mvm: new BT Coex API" from Jun 18, 2013,
> leads to the following Smatch complaint:
> 
> drivers/net/wireless/iwlwifi/mvm/bt-coex.c:754
> iwl_mvm_bt_coex_notif_handle()
> 	 error: we previously assumed 'data.primary' could be null (see line
> 709)
> 
> drivers/net/wireless/iwlwifi/mvm/bt-coex.c
>    708
>    709		if (data.primary) {
>                     ^^^^^^^^^^^^
> Patch introcudes a NULL check.
> 
>    710			struct ieee80211_chanctx_conf *chan = data.primary;
>    711			if (WARN_ON(!chan->def.chan)) {
>    712				rcu_read_unlock();
>    713				return;
>    714			}
>    715
>    716			if (chan->def.width < NL80211_CHAN_WIDTH_40) {
>    717				ci_bw_idx = 0;
>    718				cmd.co_run_bw_primary = 0;
>    719			} else {
>    720				cmd.co_run_bw_primary = 1;
>    721				if (chan->def.center_freq1 >
>    722				    chan->def.chan->center_freq)
>    723					ci_bw_idx = 2;
>    724				else
>    725					ci_bw_idx = 1;
>    726			}
>    727
>    728			cmd.bt_primary_ci =
>    729				iwl_ci_mask[chan->def.chan-
> >hw_value][ci_bw_idx];
>    730			cmd.primary_ch_phy_id = *((u16 *)data.primary-
> >drv_priv);
>    731		}
>    732
>    733		if (data.secondary) {
>    734			struct ieee80211_chanctx_conf *chan =
> data.secondary;
>    735			if (WARN_ON(!data.secondary->def.chan)) {
>    736				rcu_read_unlock();
>    737				return;
>    738			}
>    739
>    740			if (chan->def.width < NL80211_CHAN_WIDTH_40) {
>    741				ci_bw_idx = 0;
>    742				cmd.co_run_bw_secondary = 0;
>    743			} else {
>    744				cmd.co_run_bw_secondary = 1;
>    745				if (chan->def.center_freq1 >
>    746				    chan->def.chan->center_freq)
>    747					ci_bw_idx = 2;
>    748				else
>    749					ci_bw_idx = 1;
>    750			}
>    751
>    752			cmd.bt_secondary_ci =
>    753				iwl_ci_mask[chan->def.chan-
> >hw_value][ci_bw_idx];
>    754			cmd.secondary_ch_phy_id = *((u16 *)data.primary-
> >drv_priv);
>                                                            ^^^^^^^^^^^^^^^^^^^^^^ Patch introduces
> unchecked dereference.
> 
>    755		}
>    756
> 

I noticed too and fixed it already:

https://git.kernel.org/cgit/linux/kernel/git/iwlwifi/iwlwifi-next.git/commit/?id=c92f06a1dea1e444213d860a20023f72c134e20a

thanks!

      reply	other threads:[~2013-11-02 19:35 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-11-01 10:27 iwlwifi: mvm: new BT Coex API Dan Carpenter
2013-11-02 19:35 ` Grumbach, Emmanuel [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=0BA3FCBA62E2DC44AF3030971E174FB301DE6409@HASMSX103.ger.corp.intel.com \
    --to=emmanuel.grumbach@intel.com \
    --cc=dan.carpenter@oracle.com \
    --cc=linux-wireless@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox