From: Tomasz Figa <tfiga@google.com>
To: Dongchun Zhu <dongchun.zhu@mediatek.com>
Cc: Andy Shevchenko <andy.shevchenko@gmail.com>,
Colin Ian King <colin.king@canonical.com>,
Andy Shevchenko <andriy.shevchenko@linux.intel.com>,
Sakari Ailus <sakari.ailus@linux.intel.com>,
Mauro Carvalho Chehab <mchehab+huawei@kernel.org>,
Matthias Brugger <matthias.bgg@gmail.com>,
linux-media <linux-media@vger.kernel.org>,
"linux-arm-kernel@lists.infradead.org"
<linux-arm-kernel@lists.infradead.org>,
"moderated list:ARM/Mediatek SoC support"
<linux-mediatek@lists.infradead.org>,
"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
Sj Huang <sj.huang@mediatek.com>
Subject: Re: media: i2c: add OV02A10 image sensor driver
Date: Fri, 4 Dec 2020 15:23:28 +0900 [thread overview]
Message-ID: <CAAFQd5C0_v7hyvu7BHtkH_ecYUXPGTGq75Xrr63b3Fe81r=tuA@mail.gmail.com> (raw)
In-Reply-To: <1607049966.4733.189.camel@mhfsdcap03>
On Fri, Dec 4, 2020 at 11:47 AM Dongchun Zhu <dongchun.zhu@mediatek.com> wrote:
>
> Hi Andy,
>
> On Thu, 2020-12-03 at 20:10 +0200, Andy Shevchenko wrote:
> > On Thu, Dec 3, 2020 at 8:03 PM Colin Ian King <colin.king@canonical.com> wrote:
> >
> > > Static analysis on linux-next with Coverity has detected an issue with
> > > the following commit:
> >
> > If you want to fix it properly, see my comments below...
> >
> > > 529 static int ov02a10_s_stream(struct v4l2_subdev *sd, int on)
> > > 530 {
> > > 531 struct ov02a10 *ov02a10 = to_ov02a10(sd);
> > > 532 struct i2c_client *client =
> > > v4l2_get_subdevdata(&ov02a10->subdev);
> > >
> > > 1. var_decl: Declaring variable ret without initializer.
> > >
> > > 533 int ret;
> > > 534
> > > 535 mutex_lock(&ov02a10->mutex);
> > > 536
> > >
> > > 2. Condition ov02a10->streaming == on, taking true branch.
> > >
> > > 537 if (ov02a10->streaming == on)
> > >
> > > 3. Jumping to label unlock_and_return.
> > >
> > > 538 goto unlock_and_return;
> > > 539
> > > 540 if (on) {
> > > 541 ret = pm_runtime_get_sync(&client->dev);
> > > 542 if (ret < 0) {
> >
> > > 543 pm_runtime_put_noidle(&client->dev);
> > > 544 goto unlock_and_return;
> >
> > Instead of two above:
>
> From the document, pm_runtime_put_noidle is to decrease the runtime PM
> usage counter of a device unless it is 0 already; while pm_runtime_put
> would additionally run pm_request_idle to turn off the power if usage
> counter is zero.
>
> So here maybe we can really use pm_runtime_put instead of
> pm_runtime_put_noidle, although it seems that 'pm_runtime_get_sync' and
> 'pm_runtime_put_noidle' often appear in pairs.
>
In an error state (e.g. if pm_runtime_get_sync() fails),
pm_runtime_put() would decrement the usage counter and call rpm_idle()
which would instantly return an error code. The end result would be
the same, except that pm_runtime_put() would return a non-zero error
code, but we ignore it anyway. However strange it looks, this seems to
be an API guarantee, so Andy's suggestion is correct.
Best regards,
Tomasz
> > goto err_rpm_put;
> >
> > > 545 }
> > > 546
> > > 547 ret = __ov02a10_start_stream(ov02a10);
> > > 548 if (ret) {
> > > 549 __ov02a10_stop_stream(ov02a10);
> > > 550 ov02a10->streaming = !on;
> > > 551 goto err_rpm_put;
> > > 552 }
> > > 553 } else {
> > > 554 __ov02a10_stop_stream(ov02a10);
> > > 555 pm_runtime_put(&client->dev);
> > > 556 }
> > > 557
> > > 558 ov02a10->streaming = on;
> >
> > (1)
> >
> > > 559 mutex_unlock(&ov02a10->mutex);
> > > 560
> > > 561 return 0;
> > > 562
> > > 563 err_rpm_put:
> > > 564 pm_runtime_put(&client->dev);
> >
> > > 565 unlock_and_return:
> >
> > Should be moved to (1).
> >
> > > 566 mutex_unlock(&ov02a10->mutex);
> > > 567
> > >
> > > Uninitialized scalar variable (UNINIT)
> > > 4. uninit_use: Using uninitialized value ret.
> > >
> > > 568 return ret;
> > > 569 }
> > >
> > > Variable ret has not been initialized, so the error return value is a
> > > garbage value. It should be initialized with some appropriate negative
> > > error code, or ret could be removed and the return should return a
> > > literal value of a error code.
> > >
> > > I was unsure what value is appropriate to fix this, so instead I'm
> > > reporting this issue.
> >
>
prev parent reply other threads:[~2020-12-04 6:24 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-12-03 18:00 media: i2c: add OV02A10 image sensor driver Colin Ian King
2020-12-03 18:10 ` Andy Shevchenko
2020-12-03 18:24 ` Colin Ian King
2020-12-03 18:30 ` Andy Shevchenko
2020-12-04 11:45 ` Sakari Ailus
2020-12-04 2:46 ` Dongchun Zhu
2020-12-04 6:23 ` Tomasz Figa [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CAAFQd5C0_v7hyvu7BHtkH_ecYUXPGTGq75Xrr63b3Fe81r=tuA@mail.gmail.com' \
--to=tfiga@google.com \
--cc=andriy.shevchenko@linux.intel.com \
--cc=andy.shevchenko@gmail.com \
--cc=colin.king@canonical.com \
--cc=dongchun.zhu@mediatek.com \
--cc=linux-arm-kernel@lists.infradead.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-media@vger.kernel.org \
--cc=linux-mediatek@lists.infradead.org \
--cc=matthias.bgg@gmail.com \
--cc=mchehab+huawei@kernel.org \
--cc=sakari.ailus@linux.intel.com \
--cc=sj.huang@mediatek.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).