Hi,
I put here a bug among others:

----------------------- sys/arch/hppa64/dev/apic.c ---------------------

        struct evcount *cnt;
        struct apic_iv *aiv, *biv;
        void *iv;
        int irq = APIC_INT_IRQ(ih);
        int line = APIC_INT_LINE(ih);
        u_int32_t ent0;

        /* no mapping or bogus */
        if (irq <= 0 || irq > 63)
                return (NULL);

        aiv = malloc(sizeof(struct apic_iv), M_DEVBUF, M_NOWAIT);
        if (aiv == NULL) {
                free(cnt, M_DEVBUF, 0);
                return NULL;
        }

------------------------------------------------------------------------

'cnt' is not initialized.

Found by The Brainy Code Scanner.

Maxime

Reply via email to