All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH] drm/nouveau/core: fix the uninitialized use in nvkm_ioctl_map()
@ 2021-06-16 22:50 ` Yizhuo Zhai
  0 siblings, 0 replies; 12+ messages in thread
From: Yizhuo Zhai @ 2021-06-16 22:50 UTC (permalink / raw)
  To: bskeggs, David Airlie, Daniel Vetter, dri-devel, nouveau, linux-kernel

In function nvkm_ioctl_map(), the variable "type" could be
uninitialized if "nvkm_object_map()" returns error code,
however, it does not check the return value and directly
use the "type" in the if statement, which is potentially
unsafe.

Signed-off-by: Yizhuo <yzhai003@ucr.edu>
---
 drivers/gpu/drm/nouveau/nvkm/core/ioctl.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/drivers/gpu/drm/nouveau/nvkm/core/ioctl.c
b/drivers/gpu/drm/nouveau/nvkm/core/ioctl.c
index d777df5a64e6..7f2e8482f167 100644
--- a/drivers/gpu/drm/nouveau/nvkm/core/ioctl.c
+++ b/drivers/gpu/drm/nouveau/nvkm/core/ioctl.c
@@ -266,6 +266,8 @@ nvkm_ioctl_map(struct nvkm_client *client,
                ret = nvkm_object_map(object, data, size, &type,
                                      &args->v0.handle,
                                      &args->v0.length);
+               if (ret)
+                       return ret;
                if (type == NVKM_OBJECT_MAP_IO)
                        args->v0.type = NVIF_IOCTL_MAP_V0_IO;
                else
-- 
2.17.1

^ permalink raw reply related	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2021-11-22 21:52 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-06-16 22:50 [PATCH] drm/nouveau/core: fix the uninitialized use in nvkm_ioctl_map() Yizhuo Zhai
2021-06-16 22:50 ` Yizhuo Zhai
2021-06-16 22:50 ` [Nouveau] " Yizhuo Zhai
2021-11-13 20:21 ` Karol Herbst
2021-11-13 20:21   ` Karol Herbst
2021-11-13 20:21   ` [Nouveau] " Karol Herbst
2021-11-16  5:58   ` Yizhuo Zhai
2021-11-16  5:58     ` [Nouveau] " Yizhuo Zhai
2021-11-16  5:58     ` Yizhuo Zhai
2021-11-16 11:09     ` [Nouveau] " Karol Herbst
2021-11-16 11:09       ` Karol Herbst
2021-11-16 11:09       ` Karol Herbst

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.