This is an automatic generated email to let you know that the following patch 
were queued:

Subject: media: atomisp: move up sanity checks
Author:  Hans Verkuil <[email protected]>
Date:    Wed May 24 13:11:50 2023 +0100

The sanity checks were done too late, so move them up.

This fixes this smatch warning:

drivers/staging/media/atomisp/pci/sh_css_firmware.c:247 sh_css_load_firmware() 
warn: variable dereferenced before check 'fw_data' (see line 237)

Link: https://lore.kernel.org/r/[email protected]

Signed-off-by: Hans Verkuil <[email protected]>
Signed-off-by: Hans de Goede <[email protected]>
Signed-off-by: Mauro Carvalho Chehab <[email protected]>

 drivers/staging/media/atomisp/pci/sh_css_firmware.c | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

---

diff --git a/drivers/staging/media/atomisp/pci/sh_css_firmware.c 
b/drivers/staging/media/atomisp/pci/sh_css_firmware.c
index 49ee88fe151d..197ab2085e8d 100644
--- a/drivers/staging/media/atomisp/pci/sh_css_firmware.c
+++ b/drivers/staging/media/atomisp/pci/sh_css_firmware.c
@@ -233,8 +233,16 @@ sh_css_load_firmware(struct device *dev, const char 
*fw_data,
        struct sh_css_fw_bi_file_h *file_header;
        int ret;
 
+       /* some sanity checks */
+       if (!fw_data || fw_size < sizeof(struct sh_css_fw_bi_file_h))
+               return -EINVAL;
+
        firmware_header = (struct firmware_header *)fw_data;
        file_header = &firmware_header->file_header;
+
+       if (file_header->h_size != sizeof(struct sh_css_fw_bi_file_h))
+               return -EINVAL;
+
        binaries = &firmware_header->binary_header;
        strscpy(FW_rel_ver_name, file_header->version,
                min(sizeof(FW_rel_ver_name), sizeof(file_header->version)));
@@ -251,13 +259,6 @@ sh_css_load_firmware(struct device *dev, const char 
*fw_data,
                IA_CSS_LOG("successfully load firmware version %s", 
release_version);
        }
 
-       /* some sanity checks */
-       if (!fw_data || fw_size < sizeof(struct sh_css_fw_bi_file_h))
-               return -EINVAL;
-
-       if (file_header->h_size != sizeof(struct sh_css_fw_bi_file_h))
-               return -EINVAL;
-
        sh_css_num_binaries = file_header->binary_nr;
        /* Only allocate memory for ISP blob info */
        if (sh_css_num_binaries > NUM_OF_SPS) {

_______________________________________________
linuxtv-commits mailing list
[email protected]
https://www.linuxtv.org/cgi-bin/mailman/listinfo/linuxtv-commits

Reply via email to