From: kernel test robot <lkp@intel.com>
To: Tung Nguyen <tung.quang.nguyen@est.tech>, netdev@vger.kernel.org
Cc: llvm@lists.linux.dev, oe-kbuild-all@lists.linux.dev,
davem@davemloft.net, kuba@kernel.org, edumazet@kernel.org,
pabeni@redhat.com, jmaloy@redhat.com, horms@kernel.org,
tipc-discussion@lists.sourceforge.net,
Tung Nguyen <tung.quang.nguyen@est.tech>,
syzbot+64197f7577a09686ffdb@syzkaller.appspotmail.com
Subject: Re: [PATCH net v2 6/6] tipc: fix NULL pointer dereference in named_distribute()
Date: Mon, 2 Nov 2026 23:32:58 +0800 [thread overview]
Message-ID: <202611022356.UddfVq4D-lkp@intel.com> (raw)
In-Reply-To: <20261102034207.10639-7-tung.quang.nguyen@est.tech>
Hi Tung,
kernel test robot noticed the following build warnings:
[auto build test WARNING on net/main]
url: https://github.com/intel-lab-lkp/linux/commits/Tung-Nguyen/tipc-fix-memory-leak-in-tipc_node_xmit/20261102-104027
base: net/main
patch link: https://lore.kernel.org/r/20261102034207.10639-7-tung.quang.nguyen%40est.tech
patch subject: [PATCH net v2 6/6] tipc: fix NULL pointer dereference in named_distribute()
config: sparc64-randconfig-1001-20261102 (https://download.01.org/0day-ci/archive/20261102/202611022356.UddfVq4D-lkp@intel.com/config)
compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261)
reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20261102/202611022356.UddfVq4D-lkp@intel.com/reproduce)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <lkp@intel.com>
| Closes: https://lore.kernel.org/oe-kbuild-all/202611022356.UddfVq4D-lkp@intel.com/
All warnings (new ones prefixed by >>):
>> net/tipc/net.c:147:6: warning: variable 'p' is used uninitialized whenever 'if' condition is false [-Wsometimes-uninitialized]
147 | if (!tn->nt_self_node_exist)
| ^~~~~~~~~~~~~~~~~~~~~~~
net/tipc/net.c:150:6: note: uninitialized use occurs here
150 | if (p || err == -EEXIST)
| ^
net/tipc/net.c:147:2: note: remove the 'if' if its condition is always true
147 | if (!tn->nt_self_node_exist)
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
148 | p = tipc_nametbl_insert(net, &ua, &sk, addr, &skb, &err);
net/tipc/net.c:132:23: note: initialize the variable 'p' to silence this warning
132 | struct publication *p;
| ^
| = NULL
1 warning generated.
vim +147 net/tipc/net.c
125
126 static void tipc_net_finalize(struct net *net, u32 addr)
127 {
128 struct name_table *nt = tipc_name_table(net);
129 struct tipc_socket_addr sk = {0, addr};
130 struct tipc_net *tn = tipc_net(net);
131 struct sk_buff *skb = NULL;
132 struct publication *p;
133 struct tipc_uaddr ua;
134 u32 rc_dests;
135 int err = 0;
136
137 tipc_uaddr(&ua, TIPC_SERVICE_RANGE, TIPC_CLUSTER_SCOPE,
138 TIPC_NODE_STATE, addr, addr);
139
140 if (cmpxchg(&tn->node_addr, 0, addr))
141 return;
142 tipc_set_node_addr(net, addr);
143 tipc_named_reinit(net);
144 tipc_sk_reinit(net);
145 tipc_mon_reinit_self(net);
146 spin_lock_bh(&tn->nametbl_lock);
> 147 if (!tn->nt_self_node_exist)
148 p = tipc_nametbl_insert(net, &ua, &sk, addr, &skb, &err);
149
150 if (p || err == -EEXIST)
151 tn->nt_self_node_exist = true;
152 rc_dests = nt->rc_dests;
153 spin_unlock_bh(&tn->nametbl_lock);
154
155 if (skb)
156 tipc_node_broadcast(net, skb, rc_dests);
157 }
158
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
prev parent reply other threads:[~2026-11-02 15:33 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-11-02 3:40 [PATCH net v2 0/6] tipc: fix deadlock and NUll pointer dereference in tipc_named_node_up() Tung Nguyen
2026-11-02 3:40 ` [PATCH net v2 1/6] tipc: fix memory leak in tipc_node_xmit() Tung Nguyen
2026-11-02 3:40 ` [PATCH net v2 2/6] tipc: fix dangling link in cluster_scope list in tipc_service_delete() Tung Nguyen
2026-11-02 3:40 ` [PATCH net v2 3/6] tipc: fix incorrect initialization of replicast node counter Tung Nguyen
2026-11-02 3:40 ` [PATCH net v2 4/6] tipc: fix missing link-up event on memory allocation failure Tung Nguyen
2026-11-02 3:40 ` [PATCH net v2 5/6] tipc: fix self-deadlock in tipc_named_node_up Tung Nguyen
2026-11-02 3:40 ` [PATCH net v2 6/6] tipc: fix NULL pointer dereference in named_distribute() Tung Nguyen
2026-11-02 15:32 ` kernel test robot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202611022356.UddfVq4D-lkp@intel.com \
--to=lkp@intel.com \
--cc=davem@davemloft.net \
--cc=edumazet@kernel.org \
--cc=horms@kernel.org \
--cc=jmaloy@redhat.com \
--cc=kuba@kernel.org \
--cc=llvm@lists.linux.dev \
--cc=netdev@vger.kernel.org \
--cc=oe-kbuild-all@lists.linux.dev \
--cc=pabeni@redhat.com \
--cc=syzbot+64197f7577a09686ffdb@syzkaller.appspotmail.com \
--cc=tipc-discussion@lists.sourceforge.net \
--cc=tung.quang.nguyen@est.tech \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox