:::::: 
:::::: Manual check reason: "low confidence bisect report"
:::::: Manual check reason: "low confidence static check first_new_problem: 
include/linux/fortify-string.h:22:33: warning: use of NULL 'mpext' where 
non-null expected [CWE-476] [-Wanalyzer-null-argument]"
:::::: 

BCC: [email protected]
CC: [email protected]
CC: [email protected]
TO: Paolo Abeni <[email protected]>
CC: Mat Martineau <[email protected]>

tree:   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 
master
head:   53e99dcff61e1523ec1c3628b2d564ba15d32eb7
commit: f70cad1085d1e01d3ec73c1078405f906237feee mptcp: stop relying on 
tcp_tx_skb_cache
date:   12 months ago
:::::: branch date: 3 hours ago
:::::: commit date: 12 months ago
config: x86_64-randconfig-c001-20220905 
(https://download.01.org/0day-ci/archive/20220906/[email protected]/config)
compiler: gcc-11 (Debian 11.3.0-5) 11.3.0
reproduce (this is a W=1 build):
        # 
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f70cad1085d1e01d3ec73c1078405f906237feee
        git remote add linus 
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
        git fetch --no-tags linus master
        git checkout f70cad1085d1e01d3ec73c1078405f906237feee
        # save the config file
        make ARCH=x86_64 KBUILD_USERCFLAGS='-fanalyzer -Wno-error' 

If you fix the issue, kindly add following tag where applicable
Reported-by: kernel test robot <[email protected]>

gcc_analyzer warnings: (new ones prefixed by >>)
   In file included from include/linux/string.h:262,
                    from include/linux/bitmap.h:10,
                    from include/linux/cpumask.h:12,
                    from arch/x86/include/asm/cpumask.h:5,
                    from arch/x86/include/asm/msr.h:11,
                    from arch/x86/include/asm/processor.h:22,
                    from arch/x86/include/asm/timex.h:5,
                    from include/linux/timex.h:65,
                    from include/linux/time32.h:13,
                    from include/linux/time.h:60,
                    from include/linux/stat.h:19,
                    from include/linux/module.h:13,
                    from net/mptcp/protocol.c:10:
   net/mptcp/protocol.c: In function 'mptcp_sendmsg_frag':
>> include/linux/fortify-string.h:22:33: warning: use of NULL 'mpext' where 
>> non-null expected [CWE-476] [-Wanalyzer-null-argument]
      22 | #define __underlying_memset     __builtin_memset
         |                                 ^
   include/linux/fortify-string.h:175:16: note: in expansion of macro 
'__underlying_memset'
     175 |         return __underlying_memset(p, c, size);
         |                ^~~~~~~~~~~~~~~~~~~
     'mptcp_subflow_process_delegated': events 1-4
       |
       |net/mptcp/protocol.c:3045:6:
       | 3045 | void mptcp_subflow_process_delegated(struct sock *ssk)
       |      |      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
       |      |      |
       |      |      (1) entry to 'mptcp_subflow_process_delegated'
       |......
       | 3051 |         if (!sock_owned_by_user(sk))
       |      |            ~
       |      |            |
       |      |            (2) following 'true' branch...
       | 3052 |                 __mptcp_subflow_push_pending(sk, ssk);
       |      |                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
       |      |                 |
       |      |                 (3) ...to here
       |      |                 (4) calling '__mptcp_subflow_push_pending' from 
'mptcp_subflow_process_delegated'
       |
       +--> '__mptcp_subflow_push_pending': events 5-16
              |
              | 1593 | static void __mptcp_subflow_push_pending(struct sock 
*sk, struct sock *ssk)
              |      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
              |      |             |
              |      |             (5) entry to '__mptcp_subflow_push_pending'
              |......
              | 1605 |         while ((dfrag = mptcp_send_head(sk))) {
              |      |                ~
              |      |                |
              |      |                (6) following 'true' branch...
              | 1606 |                 info.sent = dfrag->already_sent;
              |      |                 ~~~~
              |      |                 |
              |      |                 (7) ...to here
              |......
              | 1609 |                 while (len > 0) {
              |      |                        ~~~~~~~
              |      |                            |
              |      |                            (8) following 'true' branch 
(when 'len > 0')...
              | 1610 |                         int ret = 0;
              |      |                         ~~~
              |      |                         |
              |      |                         (9) ...to here
              |......
              | 1616 |                         xmit_ssk = first ? ssk : 
mptcp_subflow_get_send(mptcp_sk(sk));
              |      |                                    
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
              |      |                                                |
              |      |                                                (10) 
following 'true' branch (when 'first != 0')...
              | 1617 |                         if (!xmit_ssk)
              |      |                         ~~ ~
              |      |                         |  |
              |      |                         |  (12) following 'false' 
branch...
              |      |                         (11) ...to here
              | 1618 |                                 goto out;
              | 1619 |                         if (xmit_ssk != ssk) {
              |      |                         ~~ ~
              |      |                         |  |
              |      |                         |  (14) following 'false' 
branch...
              |      |                         (13) ...to here
              |......
              | 1624 |                         ret = mptcp_sendmsg_frag(sk, 
ssk, dfrag, &info);
              |      |                         ~~~   
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
              |      |                         |     |
              |      |                         |     (16) calling 
'mptcp_sendmsg_frag' from '__mptcp_subflow_push_pending'
              |      |                         (15) ...to here
              |
              +--> 'mptcp_sendmsg_frag': events 17-20
                     |
                     | 1278 | static int mptcp_sendmsg_frag(struct sock *sk, 
struct sock *ssk,
                     |      |            ^~~~~~~~~~~~~~~~~~
                     |      |            |
                     |      |            (17) entry to 'mptcp_sendmsg_frag'
                     |......
                     | 1296 |         if (WARN_ON_ONCE(info->sent > info->limit 
||
                     |      |            ~
                     |      |            |
                     |      |            (18) following 'false' branch...
                     |......
                     | 1301 |         info->mss_now = tcp_send_mss(ssk, 
&info->size_goal, info->flags);
                     |      |         ~~~~
                     |      |         |
                     |      |         (19) ...to here
                     |......
                     | 1328 |                 skb = mptcp_alloc_tx_skb(sk, ssk, 
info->data_lock_held);
                     |      |                       
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                     |      |                       |
                     |      |                       (20) calling 
'mptcp_alloc_tx_skb' from 'mptcp_sendmsg_frag'
                     |
                     +--> 'mptcp_alloc_tx_skb': events 21-22
                            |
                            | 1253 | static struct sk_buff 
*mptcp_alloc_tx_skb(struct sock *sk, struct sock *ssk, bool data_lock_held)
                            |      |                        ^~~~~~~~~~~~~~~~~~
                            |      |                        |
                            |      |                        (21) entry to 
'mptcp_alloc_tx_skb'
                            |......
                            | 1263 |         return __mptcp_alloc_tx_skb(sk, 
ssk, gfp);

vim +/mpext +22 include/linux/fortify-string.h

a28a6e860c6cf2 Francis Laniel 2021-02-25   4  
a28a6e860c6cf2 Francis Laniel 2021-02-25   5  
a28a6e860c6cf2 Francis Laniel 2021-02-25   6  #if defined(CONFIG_KASAN_GENERIC) 
|| defined(CONFIG_KASAN_SW_TAGS)
a28a6e860c6cf2 Francis Laniel 2021-02-25   7  extern void 
*__underlying_memchr(const void *p, int c, __kernel_size_t size) 
__RENAME(memchr);
a28a6e860c6cf2 Francis Laniel 2021-02-25   8  extern int 
__underlying_memcmp(const void *p, const void *q, __kernel_size_t size) 
__RENAME(memcmp);
a28a6e860c6cf2 Francis Laniel 2021-02-25   9  extern void 
*__underlying_memcpy(void *p, const void *q, __kernel_size_t size) 
__RENAME(memcpy);
a28a6e860c6cf2 Francis Laniel 2021-02-25  10  extern void 
*__underlying_memmove(void *p, const void *q, __kernel_size_t size) 
__RENAME(memmove);
a28a6e860c6cf2 Francis Laniel 2021-02-25  11  extern void 
*__underlying_memset(void *p, int c, __kernel_size_t size) __RENAME(memset);
a28a6e860c6cf2 Francis Laniel 2021-02-25  12  extern char 
*__underlying_strcat(char *p, const char *q) __RENAME(strcat);
a28a6e860c6cf2 Francis Laniel 2021-02-25  13  extern char 
*__underlying_strcpy(char *p, const char *q) __RENAME(strcpy);
a28a6e860c6cf2 Francis Laniel 2021-02-25  14  extern __kernel_size_t 
__underlying_strlen(const char *p) __RENAME(strlen);
a28a6e860c6cf2 Francis Laniel 2021-02-25  15  extern char 
*__underlying_strncat(char *p, const char *q, __kernel_size_t count) 
__RENAME(strncat);
a28a6e860c6cf2 Francis Laniel 2021-02-25  16  extern char 
*__underlying_strncpy(char *p, const char *q, __kernel_size_t size) 
__RENAME(strncpy);
a28a6e860c6cf2 Francis Laniel 2021-02-25  17  #else
a28a6e860c6cf2 Francis Laniel 2021-02-25  18  #define __underlying_memchr       
__builtin_memchr
a28a6e860c6cf2 Francis Laniel 2021-02-25  19  #define __underlying_memcmp       
__builtin_memcmp
a28a6e860c6cf2 Francis Laniel 2021-02-25  20  #define __underlying_memcpy       
__builtin_memcpy
a28a6e860c6cf2 Francis Laniel 2021-02-25  21  #define __underlying_memmove      
__builtin_memmove
a28a6e860c6cf2 Francis Laniel 2021-02-25 @22  #define __underlying_memset       
__builtin_memset
a28a6e860c6cf2 Francis Laniel 2021-02-25  23  #define __underlying_strcat       
__builtin_strcat
a28a6e860c6cf2 Francis Laniel 2021-02-25  24  #define __underlying_strcpy       
__builtin_strcpy
a28a6e860c6cf2 Francis Laniel 2021-02-25  25  #define __underlying_strlen       
__builtin_strlen
a28a6e860c6cf2 Francis Laniel 2021-02-25  26  #define __underlying_strncat      
__builtin_strncat
a28a6e860c6cf2 Francis Laniel 2021-02-25  27  #define __underlying_strncpy      
__builtin_strncpy
a28a6e860c6cf2 Francis Laniel 2021-02-25  28  #endif
a28a6e860c6cf2 Francis Laniel 2021-02-25  29  

:::::: The code at line 22 was first introduced by commit
:::::: a28a6e860c6cf231cf3c5171c75c342adcd00406 string.h: move fortified 
functions definitions in a dedicated header.

:::::: TO: Francis Laniel <[email protected]>
:::::: CC: Linus Torvalds <[email protected]>

-- 
0-DAY CI Kernel Test Service
https://01.org/lkp
_______________________________________________
kbuild mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to