From: "Michael Büsch" <m@bues.ch>
To: Rand Deeb <rand.sec96@gmail.com>
Cc: deeb.rand@confident.ru, jonas.gorski@gmail.com,
khoroshilov@ispras.ru, kvalo@kernel.org,
linux-kernel@vger.kernel.org, linux-wireless@vger.kernel.org,
lvc-project@linuxtesting.org,
voskresenski.stanislav@confident.ru
Subject: Re: [PATCH v3] ssb: Fix potential NULL pointer dereference in ssb_device_uevent
Date: Thu, 7 Mar 2024 22:38:49 +0100 [thread overview]
Message-ID: <20240307223849.13d5b58b@barney> (raw)
In-Reply-To: <20240307211928.170877-1-rand.sec96@gmail.com>
[-- Attachment #1: Type: text/plain, Size: 1625 bytes --]
On Fri, 8 Mar 2024 00:19:28 +0300
Rand Deeb <rand.sec96@gmail.com> wrote:
> Yes, I agree, this is not critical code, but what's the point of leaving
> redundant conditions even if they won't make a significant performance
> difference, regardless of the policy (In other words, as a friendly
> discussion) ?
The point is that leaving them in is defensive programming against future changes
or against possible misunderstandings of the situation.
Removing this check would improve nothing.
> I understand and respect your point of view as software engineer but it's a
> matter of design problems which is not our case here.
No, it very well is.
> Defensive programming is typically applied when there's a potential risk,
A NULL pointer dereference is Undefined Behavior.
It can't get much worse in C.
> If we adopt this
> approach as a form of defensive programming, we'd find ourselves adding
> similar conditions to numerous functions and parameters.
Not at all.
Your suggestion was about REMOVING a null pointer check.
Not about adding one.
I NAK-ed the REMOVAL of a null pointer check. Not the addition.
> Moreover, this
> would unnecessarily complicate the codebase, especially during reviews.
Absolutely wrong.
Not having a NULL check complicates reviews.
Reviewers will have to prove that pointers cannot be NULL, if there is no check.
> so would you recommend fix the commit message as Jeff Johnson recommended ?
> or just keep it as it is ?
I don't care about the commit message.
I comment on the change itself.
--
Michael Büsch
https://bues.ch/
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
next prev parent reply other threads:[~2024-03-07 21:39 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-03-06 12:30 [PATCH v3] ssb: Fix potential NULL pointer dereference in ssb_device_uevent Rand Deeb
2024-03-06 15:54 ` Jeff Johnson
2024-03-06 19:51 ` Jonas Gorski
2024-03-07 13:41 ` Rand Deeb
2024-03-07 18:24 ` Michael Büsch
2024-03-07 21:19 ` Rand Deeb
2024-03-07 21:38 ` Michael Büsch [this message]
2024-03-07 22:02 ` James Dutton
2024-03-08 4:50 ` Michael Büsch
2024-03-07 23:29 ` Rand Deeb
2024-03-08 1:04 ` James Dutton
2024-03-08 12:11 ` Rand Deeb
2024-03-08 5:09 ` Michael Büsch
2024-03-08 11:36 ` Rand Deeb
2024-03-08 15:44 ` Michael Büsch
2024-03-12 15:31 ` [v3] ssb: Fix potential NULL pointer dereference in ssb_device_uevent() Kalle Valo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20240307223849.13d5b58b@barney \
--to=m@bues.ch \
--cc=deeb.rand@confident.ru \
--cc=jonas.gorski@gmail.com \
--cc=khoroshilov@ispras.ru \
--cc=kvalo@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-wireless@vger.kernel.org \
--cc=lvc-project@linuxtesting.org \
--cc=rand.sec96@gmail.com \
--cc=voskresenski.stanislav@confident.ru \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox