From: Chee, Tien Fong <tien.fong.chee@intel.com>
To: u-boot@lists.denx.de
Subject: [U-Boot] [PATCH] libfdt: Initialize the stack variable
Date: Tue, 5 Sep 2017 03:41:11 +0000 [thread overview]
Message-ID: <1504582870.7727.84.camel@intel.com> (raw)
In-Reply-To: <fbdfafd5-5c5e-d87a-ccd7-33bc0c8c5ad7@comcast.net>
On Rab, 2017-08-30 at 06:31 -0700, J. William Campbell wrote:
> On 8/29/2017 10:15 PM, tien.fong.chee at intel.com wrote:
> >
> > From: Tien Fong Chee <tien.fong.chee@intel.com>
> >
> > Report Coverity log:
> > The code uses a variable that has not
> > been initialized, leading to unpredictable
> > or unintended results.
> >
> > Reported-by: Coverity (CID: 60519)
> > Signed-off-by: Tien Fong Chee <tien.fong.chee@intel.com>
> > ---
> > lib/libfdt/fdt_wip.c | 2 +-
> > 1 files changed, 1 insertions(+), 1 deletions(-)
> >
> > diff --git a/lib/libfdt/fdt_wip.c b/lib/libfdt/fdt_wip.c
> > index 45fb964..01adad0 100644
> > --- a/lib/libfdt/fdt_wip.c
> > +++ b/lib/libfdt/fdt_wip.c
> > @@ -115,7 +115,7 @@ int fdt_find_regions(const void *fdt, char *
> > const inc[], int inc_count,
> > struct fdt_region region[], int max_regions,
> > char *path, int path_len, int
> > add_string_tab)
> > {
> > - int stack[FDT_MAX_DEPTH];
> > + int stack[FDT_MAX_DEPTH] = { 0 };
> It seems to me that one of three things must be true. 1) Coverity
> can't
> correctly analyze the code and stack[] is not used in an un-
> initialized
> manner, 2) stack is used in an un-initialized manner but the result
> is
> not used in that case and is a "don't care" or 3) there is a bug in
> the
> code. It seems that just initializing the variable to 0 is a "Bad
> Idea(tm)". If it is case 1 or 2, there should be a Coverity code
> annotation comment added to that effect, and if it is case 3, it
> should
> be fixed. Initializing this variable makes the binary larger to no
> purpose unless there is a bug already.
>
> Best Regards,
> J. William Campbell
Yeah, i agree with you, state machine design should ensure stack[] is
not used in a uninitialized manner. Hence, i need input from whom
familiar with this function, whether this warning fall in anyone of
these conditions. If we just direct init the stack[], and this solution
will make extra 128 bytes in binary, but having variable with default
value is also good pratice from software quality perspective.
> >
> > char *end;
> > int nextoffset = 0;
> > uint32_t tag;
>
next prev parent reply other threads:[~2017-09-05 3:41 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-08-30 5:15 [U-Boot] [PATCH] libfdt: Initialize the stack variable tien.fong.chee at intel.com
2017-08-30 13:31 ` J. William Campbell
2017-09-05 3:41 ` Chee, Tien Fong [this message]
2017-09-05 3:58 ` J. William Campbell
2017-09-15 19:25 ` sjg at google.com
-- strict thread matches above, loose matches on Subject: below --
2017-08-24 5:53 tien.fong.chee at intel.com
2017-08-25 1:04 ` Tom Rini
2017-08-25 4:01 ` Chee, Tien Fong
2017-08-30 5:01 ` Chee, Tien Fong
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1504582870.7727.84.camel@intel.com \
--to=tien.fong.chee@intel.com \
--cc=u-boot@lists.denx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox