* [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer
@ 2009-12-13 11:41 Julia Lawall
2009-12-14 3:57 ` David Miller
0 siblings, 1 reply; 2+ messages in thread
From: Julia Lawall @ 2009-12-13 11:41 UTC (permalink / raw)
To: linux-net-drivers, Steve Hodgson, Ben Hutchings, netdev,
linux-kernel, kernel-janitors
From: Julia Lawall <julia@diku.dk>
The function efx_iterate_state contains the code
memcpy(&payload->msg, payload_msg, sizeof(payload_msg));
This is the only use of payload_msg. The type of payload_msg is
changed from a pointer to an array, so that the result of sizeof really is
the length of the string.
A simplified version of the semantic patch that finds this problem is as
follows: (http://coccinelle.lip6.fr/)
// <smpl>
@@
expression *x;
expression f;
type T;
@@
*f(...,(T)x,...)
// </smpl>
Signed-off-by: Julia Lawall <julia@diku.dk>
---
drivers/net/sfc/selftest.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/drivers/net/sfc/selftest.c b/drivers/net/sfc/selftest.c
index 14949bb..af39335 100644
--- a/drivers/net/sfc/selftest.c
+++ b/drivers/net/sfc/selftest.c
@@ -47,7 +47,7 @@ static const unsigned char payload_source[ETH_ALEN] = {
0x00, 0x0f, 0x53, 0x1b, 0x1b, 0x1b,
};
-static const char *payload_msg =
+static const char payload_msg[] =
"Hello world! This is an Efx loopback test in progress!";
/**
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer
2009-12-13 11:41 [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer Julia Lawall
@ 2009-12-14 3:57 ` David Miller
0 siblings, 0 replies; 2+ messages in thread
From: David Miller @ 2009-12-14 3:57 UTC (permalink / raw)
To: julia
Cc: linux-net-drivers, shodgson, bhutchings, netdev, linux-kernel,
kernel-janitors
From: Julia Lawall <julia@diku.dk>
Date: Sun, 13 Dec 2009 12:41:29 +0100 (CET)
> From: Julia Lawall <julia@diku.dk>
>
> The function efx_iterate_state contains the code
> memcpy(&payload->msg, payload_msg, sizeof(payload_msg));
> This is the only use of payload_msg. The type of payload_msg is
> changed from a pointer to an array, so that the result of sizeof really is
> the length of the string.
>
> A simplified version of the semantic patch that finds this problem is as
> follows: (http://coccinelle.lip6.fr/)
...
> Signed-off-by: Julia Lawall <julia@diku.dk>
Applied.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2009-12-14 3:57 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2009-12-13 11:41 [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer Julia Lawall
2009-12-14 3:57 ` David Miller
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®