linux/drivers/staging
Wang Cheng ff727ab0b7 staging: rtl8712: fix uninit-value in r871xu_drv_init()
[ Upstream commit 0458e5428e ]

When 'tmpU1b' returns from r8712_read8(padapter, EE_9346CR) is 0,
'mac[6]' will not be initialized.

BUG: KMSAN: uninit-value in r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541
 r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541
 usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396
 really_probe+0x653/0x14b0 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752
 driver_probe_device drivers/base/dd.c:782 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach+0x593/0x8e0 drivers/base/dd.c:970
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017
 bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487
 device_add+0x1fff/0x26e0 drivers/base/core.c:3405
 usb_set_configuration+0x37e9/0x3ed0 drivers/usb/core/message.c:2170
 usb_generic_driver_probe+0x13c/0x300 drivers/usb/core/generic.c:238
 usb_probe_device+0x309/0x570 drivers/usb/core/driver.c:293
 really_probe+0x653/0x14b0 drivers/base/dd.c:596
 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752
 driver_probe_device drivers/base/dd.c:782 [inline]
 __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899
 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427
 __device_attach+0x593/0x8e0 drivers/base/dd.c:970
 device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017
 bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487
 device_add+0x1fff/0x26e0 drivers/base/core.c:3405
 usb_new_device+0x1b8e/0x2950 drivers/usb/core/hub.c:2566
 hub_port_connect drivers/usb/core/hub.c:5358 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]
 port_event drivers/usb/core/hub.c:5660 [inline]
 hub_event+0x58e3/0x89e0 drivers/usb/core/hub.c:5742
 process_one_work+0xdb6/0x1820 kernel/workqueue.c:2307
 worker_thread+0x10b3/0x21e0 kernel/workqueue.c:2454
 kthread+0x3c7/0x500 kernel/kthread.c:377
 ret_from_fork+0x1f/0x30

Local variable mac created at:
 r871xu_drv_init+0x1771/0x3070 drivers/staging/rtl8712/usb_intf.c:394
 usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396

KMSAN: uninit-value in r871xu_drv_init
https://syzkaller.appspot.com/bug?id=3cd92b1d85428b128503bfa7a250294c9ae00bd8

Reported-by: <syzbot+6f5ecd144854c0d8580b@syzkaller.appspotmail.com>
Tested-by: <syzbot+6f5ecd144854c0d8580b@syzkaller.appspotmail.com>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Wang Cheng <wanngchenng@gmail.com>
Link: https://lore.kernel.org/r/14c3886173dfa4597f0704547c414cfdbcd11d16.1652618244.git.wanngchenng@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-06-14 18:32:43 +02:00
..
android staging: ion: Prevent incorrect reference counting behavour 2022-04-27 13:53:57 +02:00
axis-fifo
board staging: board: Fix uninitialized spinlock when attaching genpd 2021-09-18 13:40:20 +02:00
clocking-wizard clk: staging: correct reference to config IOMEM to config HAS_IOMEM 2021-09-15 09:50:41 +02:00
comedi comedi: vmk80xx: fix bulk and interrupt message timeouts 2021-11-12 14:58:34 +01:00
emxx_udc staging: emxx_udc: fix loop in _nbu2ss_nuke() 2021-06-03 09:00:49 +02:00
fbtft staging: fbtft: fb_st7789v: reset display before initialization 2022-03-28 09:57:08 +02:00
fieldbus staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() 2022-06-14 18:32:31 +02:00
fsl-dpaa2 staging: dpaa2-switch: add a dpaa2_switch prefix to all functions in ethsw.c 2020-10-10 12:33:41 +02:00
fwserial staging: fwserial: fix TIOCGSERIAL implementation 2021-05-14 09:50:15 +02:00
gasket staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c 2020-12-30 11:53:10 +01:00
gdm724x staging: gdm724x: fix use after free in gdm_lte_rx() 2022-03-16 14:16:01 +01:00
goldfish
greybus staging: greybus: codecs: fix type confusion of list iterator variable 2022-06-14 18:32:30 +02:00
gs_fpgaboot
hikey9xx staging: spmi: hisi-spmi-controller: Fix some error handling paths 2021-01-19 18:27:25 +01:00
iio staging:iio:adc:ad7280a: Fix handing of device address bit reversing. 2022-04-08 14:40:24 +02:00
kpc2000
ks7010 staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC 2021-11-18 14:04:18 +01:00
media media: rkvdec: h264: Fix bit depth wrap in pps packet 2022-06-09 10:21:10 +02:00
most staging: most: dim2: use device release method 2021-12-17 10:14:40 +01:00
mt7621-dma staging/mt7621-dma: mtk-hsdma.c->hsdma-mt7621.c 2021-03-04 11:38:33 +01:00
mt7621-dts staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet 2022-04-08 14:40:42 +02:00
mt7621-pci staging: mt7621-pci: avoid to request pci bus resources 2020-11-06 11:11:28 +01:00
mt7621-pci-phy
mt7621-pinctrl pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled 2021-06-23 14:42:49 +02:00
netlogic
nvec
octeon staging: octeon: Drop on uncorrectable alignment or FCS error 2020-10-27 13:18:50 +01:00
octeon-usb
olpc_dcon
pi433
qlge Staging / IIO driver updates for 5.10-rc1 2020-10-15 09:46:23 -07:00
ralink-gdma staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK 2020-11-06 11:12:49 +01:00
rtl8188eu staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() 2021-03-17 17:06:31 +01:00
rtl8192e drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() 2022-06-14 18:32:42 +02:00
rtl8192u drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() 2022-06-14 18:32:42 +02:00
rtl8712 staging: rtl8712: fix uninit-value in r871xu_drv_init() 2022-06-14 18:32:43 +02:00
rtl8723bs staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() 2022-05-30 09:33:22 +02:00
rts5208 staging: rts5208: Fix get_ms_information() heap buffer size 2021-09-18 13:40:30 +02:00
sm750fb
unisys
vc04_services staging: vchiq_core: handle NULL result of find_service_by_handle 2022-04-13 21:01:01 +02:00
vme
vt6655
vt6656
wfx staging: wfx: fix an error handling in wfx_init_common() 2022-04-13 21:01:01 +02:00
wlan-ng staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() 2022-01-16 09:14:24 +01:00
Kconfig
Makefile