* [PATCH] mtip32xx: Uninitialized variable in mtip_no_dev_cleanup()
@ 2017-04-21 19:37 Dan Carpenter
2017-04-21 19:39 ` Jens Axboe
0 siblings, 1 reply; 2+ messages in thread
From: Dan Carpenter @ 2017-04-21 19:37 UTC (permalink / raw)
To: Jens Axboe, Christoph Hellwig
Cc: Johannes Thumshirn, Hannes Reinecke, Bart Van Assche,
Sachin Shukla, Pan Bian, Ming Lei, Eric Biggers, Mike Christie,
Dan Williams, linux-kernel, kernel-janitors
We set "cmd->state = -ENODEV;" but "cmd" hasn't been initialized yet.
It's weird that GCC doesn't catch this.
Fixes: 4dda4735c581 ("mtip32xx: add a status field to struct mtip_cmd")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
---
Not tested, please review carefully.
diff --git a/drivers/block/mtip32xx/mtip32xx.c b/drivers/block/mtip32xx/mtip32xx.c
index 66a6bd83faae..bd4bf70a5bcd 100644
--- a/drivers/block/mtip32xx/mtip32xx.c
+++ b/drivers/block/mtip32xx/mtip32xx.c
@@ -4105,14 +4105,12 @@ static int mtip_block_initialize(struct driver_data *dd)
static void mtip_no_dev_cleanup(struct request *rq, void *data, bool reserv)
{
struct driver_data *dd = (struct driver_data *)data;
- struct mtip_cmd *cmd;
+ struct mtip_cmd *cmd = mtip_cmd_from_tag(dd, MTIP_TAG_INTERNAL);
if (likely(!reserv)) {
cmd->status = -ENODEV;
blk_mq_complete_request(rq);
} else if (test_bit(MTIP_PF_IC_ACTIVE_BIT, &dd->port->flags)) {
-
- cmd = mtip_cmd_from_tag(dd, MTIP_TAG_INTERNAL);
if (cmd->comp_func)
cmd->comp_func(dd->port, MTIP_TAG_INTERNAL,
cmd, -ENODEV);
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH] mtip32xx: Uninitialized variable in mtip_no_dev_cleanup()
2017-04-21 19:37 [PATCH] mtip32xx: Uninitialized variable in mtip_no_dev_cleanup() Dan Carpenter
@ 2017-04-21 19:39 ` Jens Axboe
0 siblings, 0 replies; 2+ messages in thread
From: Jens Axboe @ 2017-04-21 19:39 UTC (permalink / raw)
To: Dan Carpenter, Christoph Hellwig
Cc: Johannes Thumshirn, Hannes Reinecke, Bart Van Assche,
Sachin Shukla, Pan Bian, Ming Lei, Eric Biggers, Mike Christie,
Dan Williams, linux-kernel, kernel-janitors
On 04/21/2017 01:37 PM, Dan Carpenter wrote:
> We set "cmd->state = -ENODEV;" but "cmd" hasn't been initialized yet.
> It's weird that GCC doesn't catch this.
That is weird...
> diff --git a/drivers/block/mtip32xx/mtip32xx.c b/drivers/block/mtip32xx/mtip32xx.c
> index 66a6bd83faae..bd4bf70a5bcd 100644
> --- a/drivers/block/mtip32xx/mtip32xx.c
> +++ b/drivers/block/mtip32xx/mtip32xx.c
> @@ -4105,14 +4105,12 @@ static int mtip_block_initialize(struct driver_data *dd)
> static void mtip_no_dev_cleanup(struct request *rq, void *data, bool reserv)
> {
> struct driver_data *dd = (struct driver_data *)data;
> - struct mtip_cmd *cmd;
> + struct mtip_cmd *cmd = mtip_cmd_from_tag(dd, MTIP_TAG_INTERNAL);
>
> if (likely(!reserv)) {
> cmd->status = -ENODEV;
> blk_mq_complete_request(rq);
> } else if (test_bit(MTIP_PF_IC_ACTIVE_BIT, &dd->port->flags)) {
> -
> - cmd = mtip_cmd_from_tag(dd, MTIP_TAG_INTERNAL);
> if (cmd->comp_func)
> cmd->comp_func(dd->port, MTIP_TAG_INTERNAL,
> cmd, -ENODEV);
This is wrong, you can't use the internal tag bit for both cases. A proper
fix was already merged earlier today:
http://git.kernel.dk/cgit/linux-block/commit/?h=for-4.12/block&id=95c55ff425faa190fd8ba55090fbdf33d8b2f0ae
--
Jens Axboe
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2017-04-21 19:42 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-04-21 19:37 [PATCH] mtip32xx: Uninitialized variable in mtip_no_dev_cleanup() Dan Carpenter
2017-04-21 19:39 ` Jens Axboe
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).