Page MenuHomeFreeBSD

sound: Prevent uninitialized variable destruction in chn_init()
ClosedPublic

Authored by christos on Mon, May 20, 2:03 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, May 22, 7:35 PM
Unknown Object (File)
Wed, May 22, 10:04 AM
Unknown Object (File)
Wed, May 22, 3:58 AM
Unknown Object (File)
Wed, May 22, 3:26 AM
Unknown Object (File)
Tue, May 21, 8:55 PM
Unknown Object (File)
Tue, May 21, 8:53 AM
Unknown Object (File)
Tue, May 21, 8:50 AM
Unknown Object (File)
Mon, May 20, 2:27 PM
Subscribers

Details

Summary

If dsp_unit2name() fails, we'll get to out2 with b, bs and devinfo
uninitialized, which will result in a panic.

Reported by: Pierre Pronchery <pierre@freebsdfoundation.org>
Reported by: Coverity Scan
CID: 1545029, 1545025
Pull-request: https://github.com/freebsd/freebsd-src/pull/1240
Sponsored by: The FreeBSD Foundation
MFC after: 1 day

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj added inline comments.
sys/dev/sound/pcm/channel.c
1252

These assignments are redundant since c was allocated with M_ZERO. You could just get rid of them.

This revision is now accepted and ready to land.Mon, May 20, 2:08 PM
christos added inline comments.
sys/dev/sound/pcm/channel.c
1252
christos marked an inline comment as done.

Address Mark's comment.

This revision now requires review to proceed.Mon, May 20, 2:12 PM
sys/dev/sound/pcm/channel.c
1252

It should just be done in a single patch, IMHO, but ok.

This revision is now accepted and ready to land.Mon, May 20, 2:15 PM