[PATCH] gpio-pcf857x: avoid an empty kernel message in case no irq is configured

2012-09-18 Thread Christian Engelmayer
Avoid a needless kernel message in case there is no client irq to be ignored. [2.856058] gpiochip_add: registered GPIOs 248 to 255 on device: pcf8574 [2.862830] pcf857x 1-0020: Signed-off-by: Christian Engelmayer christian.engelma...@frequentis.com --- --- a/drivers/gpio/gpio

Re: [PROBLEM] possible divide by 0 in kernel/sched/cputime.c scale_stime()

2013-11-24 Thread Christian Engelmayer
On Mon, 18 Nov 2013 18:27:06 +0100, Peter Zijlstra pet...@infradead.org wrote: That is not actually correct in the case time wraps. There's a further problem with this code though -- ever since Frederic added NO_HZ_FULL a CPU can in fact aggregate a runtime delta larger than 4 seconds, due

[PROBLEM] possible divide by 0 in kernel/sched/cputime.c scale_stime()

2013-11-16 Thread Christian Engelmayer
Since upgrading from v3.8 to v3.12 I see random crashes in function scale_stime() in kernel/sched/cputime.c: divide error: [#1] SMP Modules linked in: parport_pc(F) ppdev(F) bnep rfcomm bluetooth binfmt_misc(F) zl10353 cx88_dvb cx88_vp3054_i2c videobuf_dvb dvb_core

[PATCH] ASoC: wm8993: Remove unused pointer in wm8993_remove()

2014-02-22 Thread Christian Engelmayer
Commit 88b5bdfd (ASoC: wm8993: drop regulator_bulk_free of devm_ allocated data) eliminated the last user of driver data pointer 'wm8993' in function wm8993_remove() - Thus remove it. Detected by Coverity: CID 1186208. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Applies against branch

[PATCH 2/3] fs: ufs: Remove unused ufs_super_block_second pointer

2014-02-10 Thread Christian Engelmayer
Pointer 'usb2' to struct ufs_super_block_second acquired via ubh_get_usb_second() is never used in function ufs_statfs(). Thus remove it. Detected by Coverity: CID 139940. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- fs/ufs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git

[PATCH 1/3] fs: ufs: Remove unused ufs_super_block_first pointer

2014-02-10 Thread Christian Engelmayer
Remove occurences of unused pointers to struct ufs_super_block_first that were acquired via ubh_get_usb_first(). Detected by Coverity: CID 139929 - CID 139936, CID 139940. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- fs/ufs/balloc.c | 12 fs/ufs/ialloc.c | 4 fs

[PATCH 3/3] fs: ufs: Remove unused ufs_super_block_third pointer

2014-02-10 Thread Christian Engelmayer
Pointer 'usb3' to struct ufs_super_block_third acquired via ubh_get_usb_third() is never used in function ufs_read_cylinder_structures(). Thus remove it. Detected by Coverity: CID 139939. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- fs/ufs/super.c | 2 -- 1 file changed, 2 deletions

[PATCH 0/3] fs: ufs: Remove unused pointer

2014-02-10 Thread Christian Engelmayer
ufs_sb_private_info struct. Those calls can be thus removed safely where the return value is not further used. The series applies against v3.14-rc2 and is compile tested. Christian Engelmayer (3): fs: ufs: Remove unused ufs_super_block_first pointer. fs: ufs: Remove unused ufs_super_block_second

[PATCH v3] staging: silicom: Remove unused pointer in bypass_init_module()

2014-05-07 Thread Christian Engelmayer
Pointer 'pbpctl_dev_c' in function bypass_init_module() is unused. Thus remove it. With the last variable declaration gone, there is no more need for an own block. Remove it and adapt the indenting accordingly. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v3: Resend after v2 failed

[PATCH v2] staging: comedi: ii_pci20kc: fix usage of uninit scalar in ii20k_attach()

2014-05-07 Thread Christian Engelmayer
. Detected by Coverity - CID 1077830. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Resend after v1 failed to apply * rebased against staging-next - commit 09c3fbba (staging: rtl8188eu: Remove 'u8 *pbuf' from struct recv_buf) * fixed mua: no multipart, 7bit text/plain us

[PATCH v2 1/5] staging: rtl8188eu: fix potential leak in rtw_wx_read32()

2014-05-07 Thread Christian Engelmayer
Function rtw_wx_read32() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077711. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

[PATCH v2] staging: vt6656: fix potential leak in vt6656_hostap_ioctl()

2014-05-07 Thread Christian Engelmayer
by this driver. Detected by Coverity - CID 144381. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Resend after v1 failed to apply * rebased against staging-next - commit 09c3fbba (staging: rtl8188eu: Remove 'u8 *pbuf' from struct recv_buf) * fixed mua: no multipart, 7bit text

[PATCH v2 5/5] staging: rtl8188eu: fix potential leak in rtw_mp_pwrtrk()

2014-05-07 Thread Christian Engelmayer
Function rtw_mp_pwrtrk() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - 1077715. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging/rtl8188eu

[PATCH v2 4/5] staging: rtl8188eu: fix potential leak in rtw_mp_SetRFPath()

2014-05-07 Thread Christian Engelmayer
Function rtw_mp_SetRFPath() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077714. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

[PATCH v2] staging: rtl8712: fix potential leak in r871x_wx_set_enc_ext()

2014-05-07 Thread Christian Engelmayer
is safe. Detected by Coverity - CID 144373. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Resend after v1 failed to apply * rebased against staging-next - commit 09c3fbba (staging: rtl8188eu: Remove 'u8 *pbuf' from struct recv_buf) * fixed mua: no multipart, 7bit text/plain us

[PATCH v2 3/5] staging: rtl8188eu: fix potential leak in rtw_mp_QueryDrv()

2014-05-07 Thread Christian Engelmayer
Function rtw_mp_QueryDrv() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077713. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

[PATCH v2] staging: rtl8712: fix potential leaks in r8712_set_key()

2014-05-07 Thread Christian Engelmayer
by Coverity - CID 144370, 144371. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Resend after v1 failed to apply * rebased against staging-next - commit 09c3fbba (staging: rtl8188eu: Remove 'u8 *pbuf' from struct recv_buf) * fixed mua: no multipart, 7bit text/plain us-ascii

[PATCH v3] staging: rtl8188eu: fix potential leak in update_bcn_wps_ie()

2014-05-07 Thread Christian Engelmayer
Fix a potential leak in the error path of function update_bcn_wps_ie(). Move the affected input verification to the beginning of the function so that it may return directly without leaking already allocated memory. Detected by Coverity - CID 1077718. Signed-off-by: Christian Engelmayer cenge

[PATCH v2] staging: binder: fix usage of uninit scalar in binder_transaction()

2014-05-07 Thread Christian Engelmayer
Fix the error path when a cookie mismatch is detected. In that case the function jumps to the exit label without setting the uninitialized, local variable 'return_error'. Detected by Coverity - CID 201453. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Resend after v1 failed to apply

[PATCH v2 0/5] staging: rtl8188eu: fix Coverity defects in os_dep/ioctl_linux.c

2014-05-07 Thread Christian Engelmayer
recv_buf) * fixed mua: no multipart, 7bit text/plain us-ascii The series is compile tested and applies against branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git Christian Engelmayer (5): staging: rtl8188eu: fix potential leak in rtw_wx_read32() staging

[PATCH v2 2/5] staging: rtl8188eu: fix potential leak in rtw_wx_set_enc_ext()

2014-05-07 Thread Christian Engelmayer
Function rtw_wx_set_enc_ext() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077712. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

[PATCH v2] staging: silicom: Remove needless calls of get_status_port_fn()

2014-05-07 Thread Christian Engelmayer
Remove a needless pointer initialisation and call to get_status_port_fn() in functions remove_bypass_tpl_auto() and set_tpl_fn(). Variable 'pbpctl_dev_b' is set correctly later in the function before first use. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Resend after v1 failed

[PATCH v3] staging: rtl8188eu: fix potential leak in rtw_set_key()

2014-05-07 Thread Christian Engelmayer
correctly. Detected by Coverity - CID 1077716, 1077717. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v3: Resend after v2 failed to apply * rebased against staging-next - commit 09c3fbba (staging: rtl8188eu: Remove 'u8 *pbuf' from struct recv_buf) * fixed mua: no multipart, 7bit text

[PATCH v2] staging: rtl8723au: Remove unused pointer in rtw_wdev_free()

2014-05-07 Thread Christian Engelmayer
Pointer 'pwdev_priv' in function rtw_wdev_free() is unused - thus remove it. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Resend after v1 failed to apply * rebased against staging-next - commit 09c3fbba (staging: rtl8188eu: Remove 'u8 *pbuf' from struct recv_buf

[PATCH] ASoC: wm8985: Remove unused pointer in wm8985_remove()

2014-06-13 Thread Christian Engelmayer
Commit a0b148b4 (ASoC: wm8985: Use devm_regulator_bulk_get()) removed the last user of pointer wm8985 to struct wm8985_priv. Thus remove it. Detected by Coverity CID 1222150. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested. Applies against branch for-next in tree

[PATCH 0/2] staging: rtl8188eu: fix Coverity defects in rtw_drv_init()

2014-05-17 Thread Christian Engelmayer
git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git Christian Engelmayer (2): staging: rtl8188eu: fix usage of uninit scalar in rtw_drv_init() staging: rtl8188eu: remove dead code in rtw_drv_init() drivers/staging/rtl8188eu/os_dep/usb_intf.c | 4 +--- 1 file changed, 1 insertion(+), 3

[PATCH 2/2] staging: rtl8188eu: remove dead code in rtw_drv_init()

2014-05-17 Thread Christian Engelmayer
(status != _SUCCESS) immediately after 'status = _SUCCESS' will never evaluate true. Thus remove the logically dead code. Detected by Coverity - CID 1077553. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging/rtl8188eu/os_dep/usb_intf.c | 2 -- 1 file changed, 2 deletions

[PATCH 1/2] staging: rtl8188eu: fix usage of uninit scalar in rtw_drv_init()

2014-05-17 Thread Christian Engelmayer
Function rtw_drv_init() is written in a way that assumes 'status' != _SUCCESS as long as not explicitly set. Thus initialize 'status' to FAIL, in order to prevent undefined behaviour if going through the exit paths. Detected by Coverity - CID 1077832. Signed-off-by: Christian Engelmayer cenge

[PATCH] IB/mlx4: Fix potentially uninitialized use of 'is_mcast' in create_iboe_ah()

2014-05-17 Thread Christian Engelmayer
uninitialized. Thus init 'is_mcast' to 0. Detected by Coverity - CID 1164324 Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested. Applies against branch for-next in tree git.kernel.org/pub/scm/linux/kernel/git/roland/infiniband.git --- drivers/infiniband/hw/mlx4/ah.c | 2 +- 1

Re: [PATCH 1/2] staging: rtl8188eu: fix usage of uninit scalar in rtw_drv_init()

2014-05-17 Thread Christian Engelmayer
On Sat, 17 May 2014 17:44:23 +0300, Dan Carpenter dan.carpen...@oracle.com wrote: On Sat, May 17, 2014 at 12:38:57PM +0200, Christian Engelmayer wrote: Function rtw_drv_init() is written in a way that assumes 'status' != _SUCCESS as long as not explicitly set. Thus initialize 'status

[PATCH] net/mlx4_en: Fix uninitialized use of 'port_up' in mlx4_en_set_channels()

2014-05-17 Thread Christian Engelmayer
is undetermined. Detected by Coverity - CID 751497. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested. Applies against branch master in tree git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git --- drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 2 +- 1 file changed, 1

[PATCH] Input: ims-pcu - fix uninitialized use of 'error' in ims_pcu_buffers_alloc()

2014-05-18 Thread Christian Engelmayer
In case allocation via usb_alloc_coherent() fails in ims_pcu_buffers_alloc(), the function jumps to the exit path without initializing local variable 'error' that is used as return value. Detected by Coverity - CID 1016531. Signed-off-by: Christian Engelmayer cenge...@gmx.at

Re: [PATCH] staging: rtl8712: rtl871x_mlme.c: Cleaning up memory leak

2014-06-01 Thread Christian Engelmayer
On Sun, 1 Jun 2014 13:32:20 +0200, Rickard Strandqvist rickard_strandqv...@spectrumdigital.se wrote: There is a risk for memory leak in when something unexpected happens and the function returns. This was largely found by using a static code analysis program called cppcheck.

Re: [PATCH] staging: rtl8712: rtl871x_ioctl_linux.c: Cleaning up memory leak

2014-06-01 Thread Christian Engelmayer
On Sun, 1 Jun 2014 13:30:43 +0200, Rickard Strandqvist rickard_strandqv...@spectrumdigital.se wrote: There is a risk for memory leak in when something unexpected happens and the function returns. This was largely found by using a static code analysis program called cppcheck.

[PATCH] of: mdio: fix compile warning in of_mdiobus_register_phy()

2014-05-23 Thread Christian Engelmayer
Commit de906af1 (net: phy: make of_set_phy_supported work with genphy driver) removed the last user of variable 'max_speed' in function of_mdiobus_register_phy(), leading to compile warning unused variable ‘max_speed’ [-Wunused-variable]. Thus remove it. Signed-off-by: Christian Engelmayer cenge

[PATCH] misc: genwqe: fix uninitialized return value in genwqe_free_sync_sgl()

2014-05-13 Thread Christian Engelmayer
Function genwqe_free_sync_sgl() returns the value of variable 'rc'. 'rc' is only set in the error paths, thus initialize it by 0. Coverity CID 1204242. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch char-misc-next of tree git.kernel.org/pub/scm

[PATCH] serial: samsung: Fix compile error with SERIAL_SAMSUNG_DEBUG

2014-06-14 Thread Christian Engelmayer
Commit e4ac92d (serial: samsung: Neaten dbg uses) contains a typo in the changed dbg() function regarding the name of the used character buffer. This breaks the build if actually compiled with CONFIG_SERIAL_SAMSUNG_DEBUG. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested

[PATCH] ARM: kprobes: Fix non-ANSI declaration of arch_init_kprobes()

2014-06-14 Thread Christian Engelmayer
Fix sparse warning non-ANSI function declaration of function 'arch_init_kprobes'. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- arch/arm/kernel/kprobes.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/arm/kernel/kprobes.c b/arch/arm/kernel/kprobes.c index

[PATCH] xen/pvhvm: Fix non-ANSI declaration of xen_has_pv_devices()

2014-06-14 Thread Christian Engelmayer
Fix sparse warning non-ANSI function declaration of function 'xen_has_pv_devices'. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- arch/x86/xen/platform-pci-unplug.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/x86/xen/platform-pci-unplug.c b/arch/x86/xen

[PATCH] block: Fix memory leak in rw_copy_check_uvector() handling

2014-01-18 Thread Christian Engelmayer
Fix a memory leak in the error handling path of function sg_io() that is used during the processing of scsi ioctl. Memory already allocated by rw_copy_check_uvector() needs to be freed correctly. Detected by Coverity: CID 1128953. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- block

[PATCH] misc: genwqe: Fix potential memory leak when pinning memory

2014-01-25 Thread Christian Engelmayer
Fix a memory leak in the genwqe_pin_mem() error path as called by ioctl GENWQE_PIN_MEM. In case there is an error encountered when mapping memory, the already allocated dma_mapping struct needs to be freed correctly. Detected by Coverity: CID 1162606. Signed-off-by: Christian Engelmayer cenge

[PATCH v2] staging: silicom: Remove unused pointer in bypass_init_module()

2014-04-28 Thread Christian Engelmayer
Pointer 'pbpctl_dev_c' in function bypass_init_module() is unused. Thus remove it. With the last variable declaration gone, there is no more need for an own block. Remove it and adapt the indenting accordingly. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Added changes requested

[PATCH 3/5] staging: rtl8188eu: fix potential leak in rtw_mp_QueryDrv()

2014-04-28 Thread Christian Engelmayer
Function rtw_mp_QueryDrv() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077713. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

[PATCH 1/5] staging: rtl8188eu: fix potential leak in rtw_wx_read32()

2014-04-28 Thread Christian Engelmayer
Function rtw_wx_read32() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077711. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

[PATCH 5/5] staging: rtl8188eu: fix potential leak in rtw_mp_pwrtrk()

2014-04-28 Thread Christian Engelmayer
Function rtw_mp_pwrtrk() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - 1077715. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging/rtl8188eu

[PATCH 0/5] staging: rtl8188eu: fix Coverity defects in os_dep/ioctl_linux.c

2014-04-28 Thread Christian Engelmayer
*input = kmalloc(wrqu-data.length, GFP_KERNEL); copy_from_user(input, wrqu-data.pointer, wrqu-data.length); qAutoLoad = strncmp(input, autoload, 8); The series is compile tested and applies against branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git Christian

[PATCH 4/5] staging: rtl8188eu: fix potential leak in rtw_mp_SetRFPath()

2014-04-28 Thread Christian Engelmayer
Function rtw_mp_SetRFPath() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077714. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

[PATCH 2/5] staging: rtl8188eu: fix potential leak in rtw_wx_set_enc_ext()

2014-04-28 Thread Christian Engelmayer
Function rtw_wx_set_enc_ext() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077712. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/staging

Re: [PATCH] staging: comedi: remove duplicate pointer assignments in attach functions

2014-04-29 Thread Christian Engelmayer
On Mon, 28 Apr 2014 22:36:13 +, Hartley Sweeten hartl...@visionengravers.com wrote: Technically, these drivers are fine as-is. They are. The proposed change falls under minor code maintenance only. They are all legacy comedi drivers and use the manual attach mechanism. The dev-board

[PATCH] staging: rtl8188eu: fix potential leak in rtw_set_key()

2014-05-01 Thread Christian Engelmayer
correctly. Detected by Coverity - CID 1077716, 1077717. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers/staging/rtl8188eu/core/rtw_mlme.c | 15 ++- 1

[PATCH v2] staging: rtl8188eu: fix potential leak in rtw_set_key()

2014-05-01 Thread Christian Engelmayer
correctly. Detected by Coverity - CID 1077716, 1077717. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- v2: Added changes requested by Dan Carpenter: * Just return directly where no cleanup is needed. * Prefer naming labels by the labeled action rather than the goto location. Compile

[PATCH] staging: rtl8712: fix potential leak in r871x_wx_set_enc_ext()

2014-05-01 Thread Christian Engelmayer
is safe. Detected by Coverity - CID 144373. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 16 +--- 1 file

[PATCH] staging: rtl8723au: fix potential leak in update_bcn_wps_ie()

2014-05-01 Thread Christian Engelmayer
Fix a potential leak in the error path of function update_bcn_wps_ie(). Make sure that allocated memory for 'pbackup_remainder_ie' is freed upon return. Detected by Coverity - CID 1077718. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch staging

[PATCH] staging: rtl8188eu: fix potential leak in update_bcn_wps_ie()

2014-05-01 Thread Christian Engelmayer
Fix a potential leak in the error path of function update_bcn_wps_ie(). Make sure that allocated memory for 'pbackup_remainder_ie' is freed upon return. Detected by Coverity - CID 1077718. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch staging

Re: [PATCH] staging: rtl8723au: fix potential leak in update_bcn_wps_ie()

2014-05-01 Thread Christian Engelmayer
On Thu, 1 May 2014 14:22:17 +0200, Mateusz Guzik mgu...@redhat.com wrote: On Thu, May 01, 2014 at 01:57:27PM +0200, Christian Engelmayer wrote: Fix a potential leak in the error path of function update_bcn_wps_ie(). Make sure that allocated memory for 'pbackup_remainder_ie' is freed upon

[PATCH v2] staging: rtl8188eu: fix potential leak in update_bcn_wps_ie()

2014-05-01 Thread Christian Engelmayer
Fix a potential leak in the error path of function update_bcn_wps_ie(). Move the affected input verification to the beginning of the function so that it may return directly without leaking already allocated memory. Detected by Coverity - CID 1077718. Signed-off-by: Christian Engelmayer cenge

[PATCH] staging: rtl8712: fix potential leaks in r8712_set_key()

2014-05-01 Thread Christian Engelmayer
by Coverity - CID 144370, 144371. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers/staging/rtl8712/rtl871x_mlme.c | 28 1 file

[PATCH v2] staging: rtl8723au: fix potential leak in update_bcn_wps_ie()

2014-05-01 Thread Christian Engelmayer
Fix a potential leak in the error path of function update_bcn_wps_ie(). Move the affected input verification to the beginning of the function so that it may return directly without leaking already allocated memory. Detected by Coverity - CID 1077718. Signed-off-by: Christian Engelmayer cenge

[PATCH] staging: vt6656: fix potential leak in vt6656_hostap_ioctl()

2014-05-02 Thread Christian Engelmayer
not supported by this driver. Detected by Coverity - CID 144381. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers/staging/vt6656/hostap.c | 6 -- 1 file changed, 4

[PATCH] staging: binder: fix usage of uninit scalar in binder_transaction()

2014-05-03 Thread Christian Engelmayer
Fix the error path when a cookie mismatch is detected. In that case the function jumps to the exit label without setting the uninitialized, local variable 'return_error'. Detected by Coverity - CID 201453. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against

[PATCH] staging: comedi: ii_pci20kc: fix usage of uninit scalar in ii20k_attach()

2014-05-03 Thread Christian Engelmayer
. Detected by Coverity - CID 1077830. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers/staging/comedi/drivers/ii_pci20kc.c | 1 + 1 file changed, 1 insertion

Re: [PATCH] staging: rtl8712: fix potential leaks in r8712_set_key()

2014-05-05 Thread Christian Engelmayer
On Sat, 3 May 2014 20:27:35 -0400, Greg KH gre...@linuxfoundation.org wrote: On Thu, May 01, 2014 at 11:54:02PM +0200, Christian Engelmayer wrote: Fix potential leaks in the error paths of r8712_set_key(). In case the algorithm specific checks fail, the function returns without enqueuing

[PATCH] modpost: Fix ressource leak in read_dump()

2014-04-05 Thread Christian Engelmayer
Function read_dump() memory maps the input via grab_file(), but fails to call the corresponding unmap function. Add the missing call to release_file(). Detected by Coverity: CID 1192419 Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested - Applies against v3.14 as well as linux

Re: [PATCH 1/3] crypto: Fix potential leak in test_aead_speed() if aad_size is too big

2014-04-23 Thread Christian Engelmayer
On Wed, 23 Apr 2014 01:33:05 +0200, Marek Vasut ma...@denx.de wrote: On Monday, April 21, 2014 at 08:45:59 PM, Christian Engelmayer wrote: + if (aad_size = PAGE_SIZE) { On an unrelated note ... Won't if (aad_size PAGE_SIZE) be sufficient here? From what I have seen how the buffers

[PATCH] wlcore: fix usage of platform_device_add_data()

2014-04-24 Thread Christian Engelmayer
specific data to the device. Move the temporary struct that is kmemdup'ed to the stack. This issue exists since afb43e6d (wlcore: remove if_ops from platform_data). Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Applies against v3.15-rc2 as well as branch master in tree git.kernel.org/pub

[PATCH RESEND] wlcore: fix usage of platform_device_add_data()

2014-04-24 Thread Christian Engelmayer
specific data to the device. Move the temporary struct that is kmemdup'ed to the stack. This issue exists since afb43e6d (wlcore: remove if_ops from platform_data). Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Applies against v3.15-rc2 as well as branch master in tree git.kernel.org/pub

[PATCH] staging: comedi: remove duplicate pointer assignments in attach functions

2014-04-26 Thread Christian Engelmayer
on, is setup correctly. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against v3.15-rc2 as well as branch staging-next of tree git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers/staging/comedi/drivers/das1800.c | 2 +- drivers/staging/comedi

[PATCH] staging: rtl8723au: Remove unused pointer in rtw_wdev_free()

2014-04-26 Thread Christian Engelmayer
Pointer 'pwdev_priv' in function rtw_wdev_free() is unused - thus remove it. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against v3.15-rc2 as well as branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers/staging

[PATCH] staging: silicom: Remove needless calls of get_status_port_fn()

2014-04-26 Thread Christian Engelmayer
Remove a needless pointer initialisation and call to get_status_port_fn() in functions remove_bypass_tpl_auto() and set_tpl_fn(). Variable 'pbpctl_dev_b' is set correctly later in the function before first use. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies

[PATCH] staging: silicom: Remove unused pointer in bypass_init_module()

2014-04-26 Thread Christian Engelmayer
Pointer 'pbpctl_dev_c' in function bypass_init_module() is unused. Thus remove it. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested and applies against v3.15-rc2 as well as branch staging-next of tree git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging.git --- drivers

[PATCH 1/3] crypto: Fix potential leak in test_aead_speed() if aad_size is too big

2014-04-21 Thread Christian Engelmayer
Fix a potential memory leak in the error handling of test_aead_speed(). In case the size check on the associate data length parameter fails, the function goes through the wrong exit label. Reported by Coverity - CID 1163870. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- crypto/tcrypt.c

[PATCH 2/3] crypto: Fix potential leak in test_aead_speed() if crypto_alloc_aead() fails

2014-04-21 Thread Christian Engelmayer
Fix a potential memory leak in the error handling of test_aead_speed(). In case crypto_alloc_aead() fails, the function returns without going through the centralized cleanup path. Reported by Coverity - CID 1163870. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- crypto/tcrypt.c | 3

[PATCH 3/3] crypto: Fix leak of struct aead_request in test_aead_speed()

2014-04-21 Thread Christian Engelmayer
Fix leakage of memory for struct aead_request that is allocated via aead_request_alloc() but not released via aead_request_free(). Reported by Coverity - CID 1163869. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- crypto/tcrypt.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion

[PATCH 0/3] Cleanup ressource leaks in test_aead_speed()

2014-04-21 Thread Christian Engelmayer
applies against v3.15-rc2 as well as branch master in tree git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git and is compile tested only. Christian Engelmayer (3): crypto: Fix potential leak in test_aead_speed() if aad_size is too big crypto: Fix potential leak in test_aead_speed

[PATCH] mtd: nand: omap: fix compile warning on ‘erased_sector_bitflips’

2014-04-14 Thread Christian Engelmayer
() into the same ifdef section as the only caller. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- drivers/mtd/nand/omap2.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/mtd/nand/omap2.c b/drivers/mtd/nand/omap2.c index 1ff49b8..1b800bc 100644 --- a/drivers/mtd/nand

[PATCH resend] rsi: Fix a potential memory leak in rsi_set_channel()

2014-04-10 Thread Christian Engelmayer
by Coverity: CID 1195576. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Applies against git.kernel.org/pub/scm/linux/kernel/git/linville/wireless.git Compile tested. --- drivers/net/wireless/rsi/rsi_91x_mgmt.c | 20 ++-- 1 file changed, 10 insertions(+), 10 deletions

[PATCH resend] rsi: Fix a potential memory leak in rsi_send_auto_rate_request()

2014-04-10 Thread Christian Engelmayer
Fix a potential memory leak in the error path of function rsi_send_auto_rate_request(). In case memory allocation for array 'selected_rates' fails, the error path exits and leaves the previously allocated skb in place. Detected by Coverity: CID 1195575. Signed-off-by: Christian Engelmayer cenge

Re: [PATCH resend] rsi: Fix a potential memory leak in rsi_set_channel()

2014-04-10 Thread Christian Engelmayer
On Thu, 10 Apr 2014 16:01:35 -0400, Andev debian...@gmail.com wrote: On Thu, Apr 10, 2014 at 3:54 PM, Greg Kroah-Hartman g...@kroah.com wrote: On Thu, Apr 10, 2014 at 03:46:12PM -0400, Andev wrote: Adding Greg KH, Why do I care about this? I am not sure if this needs to be applied to

[PATCH] ASoC: Intel: Fix incorrect sizeof() in sst_hsw_stream_get_volume()

2014-04-13 Thread Christian Engelmayer
Fix an incorrect sizeof() usage in sst_hsw_stream_get_volume(). sst_dsp_read() is called to read into a variable of type u32, but is passed sizeof(u32 *) for argument 'size_t bytes'. Detected by Coverity: CID 1195260. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- sound/soc/intel/sst

[PATCH] ASoC: Intel: Fix a self assignment in sst_mem_block_alloc_scratch()

2014-04-13 Thread Christian Engelmayer
Remove a self assignment in sst_mem_block_alloc_scratch(). When calculating buffer sizes there is no need for statements without effect. Detected by Coverity: CID 1195249. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- sound/soc/intel/sst-firmware.c | 4 +--- 1 file changed, 1 insertion

[PATCH] rsi: Fix possible leak when loading firmware

2015-08-21 Thread Christian Engelmayer
by Coverity CID 1316519. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested only. --- drivers/net/wireless/rsi/rsi_91x_sdio_ops.c | 8 ++-- drivers/net/wireless/rsi/rsi_91x_usb_ops.c | 8 ++-- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/drivers/net

[PATCH] mfd: cros_ec: Fix leak in sequence_store()

2015-07-18 Thread Christian Engelmayer
The allocated cros_ec_command message structure is not freed in function sequence_store(). Make sure that 'msg' is freed in all exit paths. Detected by Coverity CID 1309667. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested only. Applies against linux-next. --- drivers

[PATCH] mfd: cros_ec: Fix possible leak in led_rgb_store()

2015-07-19 Thread Christian Engelmayer
Function led_rgb_store() contains some direct returns in error cases that leak the already allocated cros_ec_command message structure. Make sure that 'msg' is freed in all exit paths. Detected by Coverity CID 1309666. Signed-off-by: Christian Engelmayer cenge...@gmx.at --- Compile tested only

Re: [PATCH] mfd: cros_ec: Fix possible leak in led_rgb_store()

2015-07-20 Thread Christian Engelmayer
On Mon, 20 Jul 2015 07:50:36 -0700, Gwendal Grignou gwen...@chromium.org wrote: On Sun, Jul 19, 2015 at 12:43 PM, Christian Engelmayer cenge...@gmx.at wrote: Function led_rgb_store() contains some direct returns in error cases that leak the already allocated cros_ec_command message

[PATCH] [media] c8sectpfe: Fix uninitialized return in load_c8sectpfe_fw_step1()

2015-09-18 Thread Christian Engelmayer
In case of failure loading the firmware, function load_c8sectpfe_fw_step1() uses the uninitialized variable ret as return value instead of the retrieved error value. Make sure the result is deterministic. Detected by Coverity CID 1324230. Signed-off-by: Christian Engelmayer <cenge...@gmx

[PATCH] [media] c8sectpfe: Fix uninitialized variable in load_slim_core_fw()

2015-09-18 Thread Christian Engelmayer
Variable err in function load_slim_core_fw() is used without initializer. Make sure that the result is deterministic. Detected by Coverity CID 1324265. Signed-off-by: Christian Engelmayer <cenge...@gmx.at> --- Compile tested only. Applies against linux-next. --- drivers/media/platfo

[PATCH 2/2] drm/vmwgfx: Fix uninitialized return in vmw_kms_helper_dirty()

2015-09-18 Thread Christian Engelmayer
Function vmw_kms_helper_dirty() uses the uninitialized variable ret as return value. Make the result deterministic and directly return as the variable is unused anyway. Detected by Coverity CID 1324255. Signed-off-by: Christian Engelmayer <cenge...@gmx.at> --- Compile tested only. Applies a

[PATCH 1/2] drm/vmwgfx: Fix uninitialized return in vmw_cotable_unbind()

2015-09-18 Thread Christian Engelmayer
Function vmw_cotable_unbind() uses the uninitialized variable ret as return value. Make the result deterministic and directly return as the variable is unused anyway. Detected by Coverity CID 1324256. Signed-off-by: Christian Engelmayer <cenge...@gmx.at> --- Compile tested only. Applies a

Re: [PROBLEM] possible divide by 0 in kernel/sched/cputime.c scale_stime()

2013-11-24 Thread Christian Engelmayer
On Mon, 18 Nov 2013 18:27:06 +0100, Peter Zijlstra wrote: > That is not actually correct in the case time wraps. > > There's a further problem with this code though -- ever since Frederic > added NO_HZ_FULL a CPU can in fact aggregate a runtime delta larger than > 4 seconds, due to running

[PROBLEM] possible divide by 0 in kernel/sched/cputime.c scale_stime()

2013-11-16 Thread Christian Engelmayer
Since upgrading from v3.8 to v3.12 I see random crashes in function scale_stime() in kernel/sched/cputime.c: divide error: [#1] SMP Modules linked in: parport_pc(F) ppdev(F) bnep rfcomm bluetooth binfmt_misc(F) zl10353 cx88_dvb cx88_vp3054_i2c videobuf_dvb dvb_core

[PATCH] ASoC: wm8993: Remove unused pointer in wm8993_remove()

2014-02-22 Thread Christian Engelmayer
Commit 88b5bdfd (ASoC: wm8993: drop regulator_bulk_free of devm_ allocated data) eliminated the last user of driver data pointer 'wm8993' in function wm8993_remove() - Thus remove it. Detected by Coverity: CID 1186208. Signed-off-by: Christian Engelmayer --- Applies against branch for-next

[PATCH 2/3] fs: ufs: Remove unused ufs_super_block_second pointer

2014-02-10 Thread Christian Engelmayer
Pointer 'usb2' to struct ufs_super_block_second acquired via ubh_get_usb_second() is never used in function ufs_statfs(). Thus remove it. Detected by Coverity: CID 139940. Signed-off-by: Christian Engelmayer --- fs/ufs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/ufs/super.c

[PATCH 1/3] fs: ufs: Remove unused ufs_super_block_first pointer

2014-02-10 Thread Christian Engelmayer
Remove occurences of unused pointers to struct ufs_super_block_first that were acquired via ubh_get_usb_first(). Detected by Coverity: CID 139929 - CID 139936, CID 139940. Signed-off-by: Christian Engelmayer --- fs/ufs/balloc.c | 12 fs/ufs/ialloc.c | 4 fs/ufs/super.c | 2

[PATCH 3/3] fs: ufs: Remove unused ufs_super_block_third pointer

2014-02-10 Thread Christian Engelmayer
Pointer 'usb3' to struct ufs_super_block_third acquired via ubh_get_usb_third() is never used in function ufs_read_cylinder_structures(). Thus remove it. Detected by Coverity: CID 139939. Signed-off-by: Christian Engelmayer --- fs/ufs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git

[PATCH 0/3] fs: ufs: Remove unused pointer

2014-02-10 Thread Christian Engelmayer
s not alter the passed ufs_sb_private_info struct. Those calls can be thus removed safely where the return value is not further used. The series applies against v3.14-rc2 and is compile tested. Christian Engelmayer (3): fs: ufs: Remove unused ufs_super_block_first pointer. fs: ufs: Remove unused

[PATCH] misc: genwqe: Fix potential memory leak when pinning memory

2014-01-25 Thread Christian Engelmayer
Fix a memory leak in the genwqe_pin_mem() error path as called by ioctl GENWQE_PIN_MEM. In case there is an error encountered when mapping memory, the already allocated dma_mapping struct needs to be freed correctly. Detected by Coverity: CID 1162606. Signed-off-by: Christian Engelmayer

[PATCH] block: Fix memory leak in rw_copy_check_uvector() handling

2014-01-18 Thread Christian Engelmayer
Fix a memory leak in the error handling path of function sg_io() that is used during the processing of scsi ioctl. Memory already allocated by rw_copy_check_uvector() needs to be freed correctly. Detected by Coverity: CID 1128953. Signed-off-by: Christian Engelmayer --- block/scsi_ioctl.c | 6

[PATCH v3] staging: silicom: Remove unused pointer in bypass_init_module()

2014-05-07 Thread Christian Engelmayer
Pointer 'pbpctl_dev_c' in function bypass_init_module() is unused. Thus remove it. With the last variable declaration gone, there is no more need for an own block. Remove it and adapt the indenting accordingly. Signed-off-by: Christian Engelmayer --- v3: Resend after v2 failed to apply

[PATCH v2] staging: comedi: ii_pci20kc: fix usage of uninit scalar in ii20k_attach()

2014-05-07 Thread Christian Engelmayer
. Detected by Coverity - CID 1077830. Signed-off-by: Christian Engelmayer --- v2: Resend after v1 failed to apply * rebased against staging-next - commit 09c3fbba (staging: rtl8188eu: Remove 'u8 *pbuf' from struct recv_buf) * fixed mua: no multipart, 7bit text/plain us-ascii Compile

[PATCH v2 1/5] staging: rtl8188eu: fix potential leak in rtw_wx_read32()

2014-05-07 Thread Christian Engelmayer
Function rtw_wx_read32() dynamically allocates a temporary buffer that is not freed in all error paths. Use a centralized exit path and make sure that all memory is freed correctly. Detected by Coverity - CID 1077711. Signed-off-by: Christian Engelmayer --- drivers/staging/rtl8188eu/os_dep

  1   2   >