kernel-ark/drivers/usb/host
KAMBAROV, ZAUR b2134bcd2e [PATCH] USB: coverity: (desc->bitmap)[] overrun fix
The length of the array desc->bitmap is 3, and not 4:

Definitions involved:

In drivers/usb/core/hcd.h

464  	#define bitmap 	DeviceRemovable

In drivers/usb/host/ohci-hub.c

395  		struct usb_hub_descriptor	*desc

In drivers/usb/core/hub.h

130  	struct usb_hub_descriptor {
131  		__u8  bDescLength;
132  		__u8  bDescriptorType;
133  		__u8  bNbrPorts;
134  		__u16 wHubCharacteristics;
135  		__u8  bPwrOn2PwrGood;
136  		__u8  bHubContrCurrent;
137  		    	/* add 1 bit for hub status change; round to bytes */
138  		__u8  DeviceRemovable[(USB_MAXCHILDREN + 1 + 7) / 8];
139  		__u8  PortPwrCtrlMask[(USB_MAXCHILDREN + 1 + 7) / 8];
140  	} __attribute__ ((packed));

In include/linux/usb.h

306  	#define USB_MAXCHILDREN		(16)

This defect was found automatically by Coverity Prevent, a static analysis
tool.

(akpm: this code should be shot.  Field `bitmap' doesn't exist in struct
usb_hub_descriptor.  And this .c file is #included in
drivers/usb/host/ohci-hcd.c, and someone somewhere #defines `bitmap' to
`DeviceRemovable'.

>From a maintainability POV it would be better to memset the whole array
beforehand - I changed the patch to do that)

Signed-off-by: Zaur Kambarov <zkambarov@coverity.com>
Cc: <linux-usb-devel@lists.sourceforge.net?
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2005-07-12 11:52:56 -07:00
..
ehci-dbg.c
ehci-hcd.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
ehci-hub.c
ehci-mem.c
ehci-q.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
ehci-sched.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
ehci.h
hc_crisv10.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
hc_crisv10.h
isp116x-hcd.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
isp116x.h
Kconfig
Makefile
ohci-au1xxx.c
ohci-dbg.c
ohci-hcd.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
ohci-hub.c [PATCH] USB: coverity: (desc->bitmap)[] overrun fix 2005-07-12 11:52:56 -07:00
ohci-lh7a404.c
ohci-mem.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
ohci-omap.c
ohci-pci.c
ohci-ppc-soc.c
ohci-pxa27x.c
ohci-q.c
ohci-sa1111.c
ohci.h
sl811_cs.c [PATCH] pcmcia: remove references to pcmcia/version.h 2005-07-07 18:24:07 -07:00
sl811-hcd.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00
sl811.h
uhci-debug.c
uhci-hcd.c
uhci-hcd.h
uhci-hub.c
uhci-q.c [PATCH] USB: Fix kmalloc's flags type in USB 2005-07-12 11:52:56 -07:00