From: Greg KH <gregkh@linuxfoundation.org>
To: Jianping <jianping.li@oss.qualcomm.com>
Cc: srini@kernel.org, amahesh@qti.qualcomm.com, arnd@arndb.de,
linux-arm-msm@vger.kernel.org,
Ekansh Gupta <ekansh.gupta@oss.qualcomm.com>,
thierry.escande@linaro.org, abelvesa@kernel.org,
dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org,
quic_chennak@quicinc.com, stable@kernel.org
Subject: Re: [PATCH v2 1/4] misc: fastrpc: Add NULL check to fastrpc_buf_free to prevent crash
Date: Mon, 2 Feb 2026 09:41:18 +0100 [thread overview]
Message-ID: <2026020245-catalog-outburst-f805@gregkh> (raw)
In-Reply-To: <2255b500-f4fd-4d7a-a5d9-5b4fb55c78b2@oss.qualcomm.com>
On Mon, Feb 02, 2026 at 03:13:10PM +0800, Jianping wrote:
>
>
> On 1/16/2026 10:49 PM, Greg KH wrote:
> > On Thu, Jan 15, 2026 at 04:28:48PM +0800, Jianping Li wrote:
> > > From: Ekansh Gupta <ekansh.gupta@oss.qualcomm.com>
> > >
> > > The fastrpc_buf_free function currently does not handle the case where
> > > the input buffer pointer (buf) is NULL. This can lead to a null pointer
> > > dereference, causing a crash or undefined behavior when the function
> > > attempts to access members of the buf structure. Add a NULL check to
> > > ensure safe handling of NULL pointers and prevent potential crashes.
> >
> > What caller passes in NULL here? I did a quick look, and see where the
> > callers check this properly if it could be NULL, otherwise it all looks
> > sane to me. What in-kernel user is causing a crash here? Why not fix
> > the caller up instead?
> >
> > thanks,
> >
> > greg k-h
>
> It's a saftety coding: to eliminate NULL checks on the caller side, as we do
> in a lot of other kernel API.
But you do not do that for all functions in the kernel, otherwise the
kernel would be full of checks that are never hit at all.
> And it was pointed out in the v1 patch discussion that this change was
> needed:
> https://lore.kernel.org/all/c80c48a1-f1b6-4520-9d7c-3a83915c7717@oss.qualcomm.com/
Were the checks removed from the caller side like was asked for?
Also, your changelog makes it sound like this is a real bugfix for
something, when it is not at all, which is what I object to the most.
Don't make scary changelogs for things that are not actually happening.
thanks,
greg k-h
next prev parent reply other threads:[~2026-02-02 8:41 UTC|newest]
Thread overview: 26+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-01-15 8:28 [PATCH v2 0/4] Add missing bug fixes Jianping Li
2026-01-15 8:28 ` [PATCH v2 1/4] misc: fastrpc: Add NULL check to fastrpc_buf_free to prevent crash Jianping Li
2026-01-15 20:43 ` Dmitry Baryshkov
2026-02-02 6:33 ` Jianping
2026-01-16 14:49 ` Greg KH
2026-02-02 7:13 ` Jianping
2026-02-02 8:41 ` Greg KH [this message]
2026-02-03 11:00 ` Jianping
2026-02-03 12:08 ` Jianping
2026-02-03 21:32 ` Bjorn Andersson
2026-02-05 9:07 ` Jianping
2026-01-15 8:28 ` [PATCH v2 2/4] misc: fastrpc: Fix initial memory allocation for Audio PD memory pool Jianping Li
2026-01-15 20:45 ` Dmitry Baryshkov
2026-02-02 6:42 ` Jianping
2026-01-15 8:28 ` [PATCH v2 3/4] misc: fastrpc: Remove buffer from list prior to unmap operation Jianping Li
2026-01-15 20:47 ` Dmitry Baryshkov
2026-02-02 6:51 ` Jianping
2026-02-03 21:15 ` Dmitry Baryshkov
2026-02-05 9:00 ` Jianping
2026-01-15 8:28 ` [PATCH v2 4/4] misc: fastrpc: Allocate entire reserved memory for Audio PD in probe Jianping Li
2026-01-15 20:49 ` Dmitry Baryshkov
2026-02-02 7:06 ` Jianping
2026-02-03 21:19 ` Dmitry Baryshkov
2026-02-03 21:42 ` Bjorn Andersson
2026-02-05 9:04 ` Jianping
2026-02-05 9:02 ` Jianping
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2026020245-catalog-outburst-f805@gregkh \
--to=gregkh@linuxfoundation.org \
--cc=abelvesa@kernel.org \
--cc=amahesh@qti.qualcomm.com \
--cc=arnd@arndb.de \
--cc=dri-devel@lists.freedesktop.org \
--cc=ekansh.gupta@oss.qualcomm.com \
--cc=jianping.li@oss.qualcomm.com \
--cc=linux-arm-msm@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=quic_chennak@quicinc.com \
--cc=srini@kernel.org \
--cc=stable@kernel.org \
--cc=thierry.escande@linaro.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®