lkml.org 
[lkml]   [2022]   [Apr]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH v3 1/7] staging: r8188eu: remove unused member free_bss_buf
As a kernel community, I don't think we are pro-active enough about
preventing bugs. One of my co-workers and I have started a bi weekly
phone call to look at CVEs from the previous week and discuss how they
could have been prevented or detected earlier. Of course, my solutions
are always centered around static analysis because that's my deal but
some bugs are caused by process issues, or could be detected with better
testing.

In this case there were two bugs proposed bugs.

1) The memory leak that Fabio noticed. Smatch is bad at detecting
memory leaks. It's a hard problem, because in this case it's
across function boundaries.

Fabio caught the leak. I don't know if I would have.

2) The NULL dereference.

The "&pnetwork->list" expression is not a dereference so this is also
a cross function thing. I thought I used to have an unpublished check
for bogus addresses like that where pnetwork is NULL.

Another is idea is that when you have pnetwork++ and it's a NULL
pointer then print an error message. Or even potentially NULL.
There are various heuristics to use which mean that "A reasonable
person would think this could be NULL".

Or another idea would be that we could test patches. Right now we
don't really have a way to test these. But, of course, we wish we
did.

It's not super likely that we would have committed the NULL deref
patch. I would have caught that one if you didn't and Fabio likely
would have as well. But I like to remove the human error whenever I
can.

regards,
dan carpenter

\
 
 \ /
  Last update: 2022-04-20 13:56    [W:0.065 / U:0.036 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site