Brainy: Set of 17 potential bugs

Aled Morris aledm at qix.co.uk
Sun Mar 1 19:32:12 UTC 2015


On 28 February 2015 at 14:51, Maxime Villard <max at m00nbsd.net> wrote:

> Hi,
> I have been developing a C code scanner for a while, particularly good at
> finding kernel bugs. I've scanned the FreeBSD tree partially, and among
> the numerous results, I've put here a list of 17 bugs affecting the
> FreeBSD-10 Stable kernel:
>
>         http://m00nbsd.net/59a47a86959c23b3f7c8bc495598dfde.html
>
> Found by The Brainy Code Scanner. More information: max at m00nbsd dot net
>
>
Regarding:

# 04 SYS/NFS/
0x01 UNINITIALIZED VAR: krpc_subr.c rev256281
     Uninitialized var 'so' at l.430.


Is this in subroutine "krpc_call"?  "so" is initialised by virtue of a
call-by-reference to "socreate" around the beginning of that function.

        if ((error = socreate(AF_INET, &so, SOCK_DGRAM, 0, td->td_ucred,
td)))
                goto out;

Or did I misunderstand?

Aled


More information about the freebsd-hackers mailing list