Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 1 Mar 2015 19:32:09 +0000
From:      Aled Morris <aledm@qix.co.uk>
To:        Maxime Villard <max@m00nbsd.net>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: Brainy: Set of 17 potential bugs
Message-ID:  <CAO1bj=abgfVLteigJOZwNMNTzGWVoirfbjXHz5vUDrvFXPy-ZA@mail.gmail.com>
In-Reply-To: <54F1D602.6050108@M00nBSD.net>
References:  <54F1D602.6050108@M00nBSD.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 28 February 2015 at 14:51, Maxime Villard <max@m00nbsd.net> wrote:

> Hi,
> I have been developing a C code scanner for a while, particularly good at
> finding kernel bugs. I've scanned the FreeBSD tree partially, and among
> the numerous results, I've put here a list of 17 bugs affecting the
> FreeBSD-10 Stable kernel:
>
>         http://m00nbsd.net/59a47a86959c23b3f7c8bc495598dfde.html
>
> Found by The Brainy Code Scanner. More information: max at m00nbsd dot net
>
>
Regarding:

# 04 SYS/NFS/
0x01 UNINITIALIZED VAR: krpc_subr.c rev256281
     Uninitialized var 'so' at l.430.


Is this in subroutine "krpc_call"?  "so" is initialised by virtue of a
call-by-reference to "socreate" around the beginning of that function.

        if ((error = socreate(AF_INET, &so, SOCK_DGRAM, 0, td->td_ucred,
td)))
                goto out;

Or did I misunderstand?

Aled



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAO1bj=abgfVLteigJOZwNMNTzGWVoirfbjXHz5vUDrvFXPy-ZA>