Details
-
Bug
-
Resolution: Fixed
-
Minor
-
None
-
None
-
3
-
9223372036854775807
Description
smatch highlights this interesting bit of code in LNetCtl:
config = arg; if (config->cfg_hdr.ioc_len < total) return -EINVAL; net_config = (struct lnet_ioctl_net_config *) config->cfg_bulk; if (config == NULL || net_config == NULL) return -1;
notic how we assume config can be NULL way after we defererenced it multiple times. should we move the check?