mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
* [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer
@ 2009-12-13 11:41 Julia Lawall
  2009-12-14  3:57 ` David Miller
  0 siblings, 1 reply; 2+ messages in thread
From: Julia Lawall @ 2009-12-13 11:41 UTC (permalink / raw)
  To: linux-net-drivers, Steve Hodgson, Ben Hutchings, netdev,
	linux-kernel, kernel-janitors

From: Julia Lawall <julia@diku.dk>

The function efx_iterate_state contains the code
memcpy(&payload->msg, payload_msg, sizeof(payload_msg));
This is the only use of payload_msg.  The type of payload_msg is
changed from a pointer to an array, so that the result of sizeof really is
the length of the string.

A simplified version of the semantic patch that finds this problem is as
follows: (http://coccinelle.lip6.fr/)

// <smpl>
@@
expression *x;
expression f;
type T;
@@

*f(...,(T)x,...)
// </smpl>

Signed-off-by: Julia Lawall <julia@diku.dk>

---
 drivers/net/sfc/selftest.c          |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/drivers/net/sfc/selftest.c b/drivers/net/sfc/selftest.c
index 14949bb..af39335 100644
--- a/drivers/net/sfc/selftest.c
+++ b/drivers/net/sfc/selftest.c
@@ -47,7 +47,7 @@ static const unsigned char payload_source[ETH_ALEN] = {
 	0x00, 0x0f, 0x53, 0x1b, 0x1b, 0x1b,
 };
 
-static const char *payload_msg =
+static const char payload_msg[] =
 	"Hello world! This is an Efx loopback test in progress!";
 
 /**

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer
  2009-12-13 11:41 [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer Julia Lawall
@ 2009-12-14  3:57 ` David Miller
  0 siblings, 0 replies; 2+ messages in thread
From: David Miller @ 2009-12-14  3:57 UTC (permalink / raw)
  To: julia
  Cc: linux-net-drivers, shodgson, bhutchings, netdev, linux-kernel,
	kernel-janitors

From: Julia Lawall <julia@diku.dk>
Date: Sun, 13 Dec 2009 12:41:29 +0100 (CET)

> From: Julia Lawall <julia@diku.dk>
> 
> The function efx_iterate_state contains the code
> memcpy(&payload->msg, payload_msg, sizeof(payload_msg));
> This is the only use of payload_msg.  The type of payload_msg is
> changed from a pointer to an array, so that the result of sizeof really is
> the length of the string.
> 
> A simplified version of the semantic patch that finds this problem is as
> follows: (http://coccinelle.lip6.fr/)
 ...
> Signed-off-by: Julia Lawall <julia@diku.dk>

Applied.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2009-12-14  3:57 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2009-12-13 11:41 [PATCH 4/9] drivers/net/sfc: Correct code taking the size of a pointer Julia Lawall
2009-12-14  3:57 ` David Miller

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®