Page MenuHomeFreeBSD

nvmecontrol wdc: Don't pass a bogus pointer to free().
ClosedPublic

Authored by jhb on Sep 29 2022, 10:39 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Jun 22, 7:04 PM
Unknown Object (File)
Jun 13 2026, 9:30 PM
Unknown Object (File)
Jun 12 2026, 3:29 PM
Unknown Object (File)
May 26 2026, 8:05 AM
Unknown Object (File)
May 26 2026, 8:01 AM
Unknown Object (File)
May 25 2026, 11:29 PM
Unknown Object (File)
May 25 2026, 11:24 PM
Unknown Object (File)
May 21 2026, 5:04 PM
Subscribers

Details

Summary

wdc_get_dui_log_size allocates a buffer and then advances the
returned pointer. Passing this advanced pointer to free() is UB,
so save the original pointer to pass to free() instead.

Reported by: GCC 12 -Wfree-nonheap-object

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable