[PATCH] boot: Ensure that ranges is not used uninitialised

Andrew Goodbody andrew.goodbody at linaro.org
Mon Jun 30 11:51:46 CEST 2025


On 27/06/2025 13:23, Yao Zi wrote:
> On Fri, Jun 27, 2025 at 12:51:02PM +0100, Andrew Goodbody wrote:
>> The local variable ranges may be used uninitialised if the function
>> fdt_get_dma_range is called with node < 0. Ensure this does not
>> happen by initialising ranges when declared.
> 
> It doesn't harm. When node < 0, parent is less than zero as well, and
> the first while loop is skipped. The control flow just fails into the
> error path where parent < 0 stays true.

OK, I will withdraw the patch. It just does not seem a great idea to 
have an uninitialised variable evaluated even if the result of that 
evaluation is irrelevant due to the second term in the logical OR being 
true.

> Furthermore, it doesn't seem valid to call fdt_get_dma_range() with a
> negative node parameter, does it?

No it does not, but that is a different issue. Just because it is not 
valid does not mean it will never happen.

Andrew

>> /**
>>   * fdt_get_dma_range() - get DMA ranges to perform bus/cpu translations
>>   *
>>   * @blob: pointer to device tree blob
>>   * @node_offset: node DT offset
>>   * @cpu: pointer to variable storing the range's cpu address
>>   * @bus: pointer to variable storing the range's bus address
>>   * @size: pointer to variable storing the range's size
>>   *
>>   * Get DMA ranges for a specifc node, this is useful to perform bus->cpu and
>>   * cpu->bus address translations
>>   *
>>   * Return: translated DMA address or OF_BAD_ADDR on error
>>   */
>> int fdt_get_dma_range(const void *blob, int node_offset, phys_addr_t *cpu,
>>                        dma_addr_t *bus, u64 *size);
> 
> Regards,
> Yao Zi
> 
>> This issue was found with Smatch.
>>
>> Signed-off-by: Andrew Goodbody <andrew.goodbody at linaro.org>
>> ---
>>   boot/fdt_support.c | 2 +-
>>   1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/boot/fdt_support.c b/boot/fdt_support.c
>> index 92f2f534ee0..4f63ce9a763 100644
>> --- a/boot/fdt_support.c
>> +++ b/boot/fdt_support.c
>> @@ -1547,7 +1547,7 @@ int fdt_get_dma_range(const void *blob, int node, phys_addr_t *cpu,
>>   {
>>   	bool found_dma_ranges = false;
>>   	struct of_bus *bus_node;
>> -	const fdt32_t *ranges;
>> +	const fdt32_t *ranges = NULL;
>>   	int na, ns, pna, pns;
>>   	int parent = node;
>>   	int ret = 0;
>>
>> ---
>> base-commit: 359e3012921f2fc2d43f3c4e320a752173f82b82
>> change-id: 20250627-boot_fdt_fix-e4e56d956c8a
>>
>> Best regards,
>> -- 
>> Andrew Goodbody <andrew.goodbody at linaro.org>
>>



More information about the U-Boot mailing list