On Fri, May 29, 2020 at 11:02:15PM +0100, David Howells wrote:
> +static struct afs_volume *afs_sample_volume(struct afs_cell *cell, struct 
> key *key,
> +                                         const char *name, unsigned int 
> namelen)
> +{
> +     struct afs_volume *volume;
> +     struct afs_fs_context fc = {
> +             .type           = 0, /* Explicitly leave it to the VLDB */
> +             .volnamesz      = namelen,
> +             .volname        = name,
> +             .net            = cell->net,
> +             .cell           = cell,
> +             .key            = key, /* This might need to be something */
> +     };
> +
> +     volume = afs_create_volume(&fc);
> +     _leave(" = %px", volume);
> +     return volume;
> +}

This really doesn't seem like a justified[1] place for %px. (Even if
_leavel() is debug-only, all the rest of _leave() uses are %p.)

> +     default:
> +             BUG();

And nothing should add BUG() to new code[2].

-Kees

[1] 
https://www.kernel.org/doc/html/latest/process/deprecated.html#p-format-specifier
[2] 
https://www.kernel.org/doc/html/latest/process/deprecated.html#bug-and-bug-on

-- 
Kees Cook

Reply via email to