From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id BDF59C5AC75 for ; Wed, 26 Jan 2022 03:04:36 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 0F6256B0071; Tue, 25 Jan 2022 22:04:36 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 0A6656B0075; Tue, 25 Jan 2022 22:04:36 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id EAFB76B0078; Tue, 25 Jan 2022 22:04:35 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0138.hostedemail.com [216.40.44.138]) by kanga.kvack.org (Postfix) with ESMTP id DAFF56B0071 for ; Tue, 25 Jan 2022 22:04:35 -0500 (EST) Received: from smtpin17.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay04.hostedemail.com (Postfix) with ESMTP id 8971094FCB for ; Wed, 26 Jan 2022 03:04:35 +0000 (UTC) X-FDA: 79070945310.17.274BF2A Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) by imf08.hostedemail.com (Postfix) with ESMTP id 3758F16000D for ; Wed, 26 Jan 2022 03:04:33 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1643166274; x=1674702274; h=date:from:to:cc:subject:message-id:mime-version; bh=jII9WeMsI3+WYZgwVXV5+KiN/QTIK+ke4FDlZ4mpkJc=; b=I0uKWxBO6AVw+XejPq8ouWC6xslAF34Ypb0eG78uuLVOOCIGQeBrKP3h IheqKdK29SE/9jP5FXTtv4UfBWTm3ny8fJtmkPzZrrAB+iOhSExge5Mep K0XPI7Y557JnMjMrzswOKwjA/VqM1u/G/9cQpiJOJel3ll9vgx3fu8mYV el+vxB86nB2bSSABN7AZ0Nt1S04z1ZSzfApnXyMb7esGRkf8BlphfmbDg PGYhqP+oaZrw9yH/Zpic8/HI/OcFVT7sKyL2Y8GOon9iLlfDbBLcr5X1A fgOq7m0pMt4dS6Uh5p1WWcwEml1Bqz+5uDJ8t906T3TXEtxc2WJ/gSgzq g==; X-IronPort-AV: E=McAfee;i="6200,9189,10238"; a="233844469" X-IronPort-AV: E=Sophos;i="5.88,316,1635231600"; d="scan'208";a="233844469" Received: from orsmga006.jf.intel.com ([10.7.209.51]) by orsmga101.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 25 Jan 2022 19:04:32 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.88,316,1635231600"; d="scan'208";a="479746200" Received: from lkp-server01.sh.intel.com (HELO 276f1b88eecb) ([10.239.97.150]) by orsmga006.jf.intel.com with ESMTP; 25 Jan 2022 19:04:31 -0800 Received: from kbuild by 276f1b88eecb with local (Exim 4.92) (envelope-from ) id 1nCYbm-000Kiv-OU; Wed, 26 Jan 2022 03:04:30 +0000 Date: Wed, 26 Jan 2022 11:03:52 +0800 From: kernel test robot To: Kees Cook Cc: kbuild-all@lists.01.org, Linux Memory Management List Subject: [linux-next:master 1562/1734] drivers/hid/hid-hyperv.c:218:9: sparse: sparse: cast from restricted __le16 Message-ID: <202201261137.2CfyPBXl-lkp@intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) X-Rspam-User: nil X-Rspamd-Server: rspam10 X-Rspamd-Queue-Id: 3758F16000D X-Stat-Signature: 3dchqojk7w13n4mk4gpbbzsxhgqjjdty Authentication-Results: imf08.hostedemail.com; dkim=pass header.d=intel.com header.s=Intel header.b=I0uKWxBO; spf=none (imf08.hostedemail.com: domain of lkp@intel.com has no SPF policy when checking 134.134.136.20) smtp.mailfrom=lkp@intel.com; dmarc=pass (policy=none) header.from=intel.com X-HE-Tag: 1643166273-277675 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: tree: https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git master head: d25ee88530253138d0b20d43511ca5acbda4e9f7 commit: 602670289b69b2fded3a0b2240c4877e3a015ac6 [1562/1734] fortify: Detect struct member overflows in memcpy() at compile-time config: i386-allmodconfig (https://download.01.org/0day-ci/archive/20220126/202201261137.2CfyPBXl-lkp@intel.com/config) compiler: gcc-9 (Debian 9.3.0-22) 9.3.0 reproduce: # apt-get install sparse # sparse version: v0.6.4-dirty # https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=602670289b69b2fded3a0b2240c4877e3a015ac6 git remote add linux-next https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git git fetch --no-tags linux-next master git checkout 602670289b69b2fded3a0b2240c4877e3a015ac6 # save the config file to linux build tree mkdir build_dir make W=1 C=1 CF='-fdiagnostic-prefix -D__CHECK_ENDIAN__' O=build_dir ARCH=i386 SHELL=/bin/bash drivers/acpi/apei/ drivers/hid/ If you fix the issue, kindly add following tag as appropriate Reported-by: kernel test robot sparse warnings: (new ones prefixed by >>) drivers/hid/hid-hyperv.c:202:40: sparse: sparse: incorrect type in assignment (different base types) @@ expected unsigned int [usertype] report_desc_size @@ got restricted __le16 [usertype] wDescriptorLength @@ drivers/hid/hid-hyperv.c:202:40: sparse: expected unsigned int [usertype] report_desc_size drivers/hid/hid-hyperv.c:202:40: sparse: got restricted __le16 [usertype] wDescriptorLength >> drivers/hid/hid-hyperv.c:218:9: sparse: sparse: cast from restricted __le16 -- drivers/acpi/apei/erst.c:272:13: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void *src @@ got void [noderef] __iomem * @@ drivers/acpi/apei/erst.c:272:13: sparse: expected void *src drivers/acpi/apei/erst.c:272:13: sparse: got void [noderef] __iomem * drivers/acpi/apei/erst.c:275:13: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void *dst @@ got void [noderef] __iomem * @@ drivers/acpi/apei/erst.c:275:13: sparse: expected void *dst drivers/acpi/apei/erst.c:275:13: sparse: got void [noderef] __iomem * drivers/acpi/apei/erst.c:277:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void *src @@ drivers/acpi/apei/erst.c:277:25: sparse: expected void volatile [noderef] __iomem *addr drivers/acpi/apei/erst.c:277:25: sparse: got void *src drivers/acpi/apei/erst.c:283:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void *src @@ drivers/acpi/apei/erst.c:283:17: sparse: expected void volatile [noderef] __iomem *addr drivers/acpi/apei/erst.c:283:17: sparse: got void *src drivers/acpi/apei/erst.c:284:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void *dst @@ drivers/acpi/apei/erst.c:284:17: sparse: expected void volatile [noderef] __iomem *addr drivers/acpi/apei/erst.c:284:17: sparse: got void *dst >> drivers/acpi/apei/erst.c:792:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const * @@ got void [noderef] __iomem *static [toplevel] vaddr @@ drivers/acpi/apei/erst.c:792:9: sparse: expected void const * drivers/acpi/apei/erst.c:792:9: sparse: got void [noderef] __iomem *static [toplevel] vaddr >> drivers/acpi/apei/erst.c:792:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const * @@ got void [noderef] __iomem *static [toplevel] vaddr @@ drivers/acpi/apei/erst.c:792:9: sparse: expected void const * drivers/acpi/apei/erst.c:792:9: sparse: got void [noderef] __iomem *static [toplevel] vaddr drivers/acpi/apei/erst.c:792:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void * @@ got void [noderef] __iomem *static [toplevel] vaddr @@ drivers/acpi/apei/erst.c:792:9: sparse: expected void * drivers/acpi/apei/erst.c:792:9: sparse: got void [noderef] __iomem *static [toplevel] vaddr drivers/acpi/apei/erst.c:793:20: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct cper_record_header *rcd_erange @@ got void [noderef] __iomem *static [toplevel] vaddr @@ drivers/acpi/apei/erst.c:793:20: sparse: expected struct cper_record_header *rcd_erange drivers/acpi/apei/erst.c:793:20: sparse: got void [noderef] __iomem *static [toplevel] vaddr drivers/acpi/apei/erst.c:830:17: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct cper_record_header *rcd_tmp @@ got void [noderef] __iomem * @@ drivers/acpi/apei/erst.c:830:17: sparse: expected struct cper_record_header *rcd_tmp drivers/acpi/apei/erst.c:830:17: sparse: got void [noderef] __iomem * vim +218 drivers/hid/hid-hyperv.c b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 180 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 181 static void mousevsc_on_receive_device_info(struct mousevsc_dev *input_device, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 182 struct synthhid_device_info *device_info) b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 183 { b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 184 int ret = 0; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 185 struct hid_descriptor *desc; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 186 struct mousevsc_prt_msg ack; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 187 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 188 input_device->dev_info_status = -ENOMEM; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 189 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 190 input_device->hid_dev_info = device_info->hid_dev_info; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 191 desc = &device_info->hid_descriptor; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 192 if (desc->bLength == 0) b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 193 goto cleanup; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 194 af13f9ed6f9aa68 Dexuan Cui 2019-11-19 195 /* The pointer is not NULL when we resume from hibernation */ af13f9ed6f9aa68 Dexuan Cui 2019-11-19 196 kfree(input_device->hid_desc); a4a23f6d68ad2c8 Thomas Meyer 2013-06-01 197 input_device->hid_desc = kmemdup(desc, desc->bLength, GFP_ATOMIC); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 198 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 199 if (!input_device->hid_desc) b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 200 goto cleanup; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 201 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 @202 input_device->report_desc_size = desc->desc[0].wDescriptorLength; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 203 if (input_device->report_desc_size == 0) { b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 204 input_device->dev_info_status = -EINVAL; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 205 goto cleanup; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 206 } b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 207 af13f9ed6f9aa68 Dexuan Cui 2019-11-19 208 /* The pointer is not NULL when we resume from hibernation */ af13f9ed6f9aa68 Dexuan Cui 2019-11-19 209 kfree(input_device->report_desc); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 210 input_device->report_desc = kzalloc(input_device->report_desc_size, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 211 GFP_ATOMIC); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 212 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 213 if (!input_device->report_desc) { b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 214 input_device->dev_info_status = -ENOMEM; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 215 goto cleanup; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 216 } b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 217 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 @218 memcpy(input_device->report_desc, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 219 ((unsigned char *)desc) + desc->bLength, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 220 desc->desc[0].wDescriptorLength); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 221 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 222 /* Send the ack */ b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 223 memset(&ack, 0, sizeof(struct mousevsc_prt_msg)); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 224 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 225 ack.type = PIPE_MESSAGE_DATA; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 226 ack.size = sizeof(struct synthhid_device_info_ack); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 227 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 228 ack.ack.header.type = SYNTH_HID_INITIAL_DEVICE_INFO_ACK; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 229 ack.ack.header.size = 1; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 230 ack.ack.reserved = 0; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 231 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 232 ret = vmbus_sendpacket(input_device->device->channel, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 233 &ack, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 234 sizeof(struct pipe_prt_msg) - sizeof(unsigned char) + b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 235 sizeof(struct synthhid_device_info_ack), b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 236 (unsigned long)&ack, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 237 VM_PKT_DATA_INBAND, b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 238 VMBUS_DATA_PACKET_FLAG_COMPLETION_REQUESTED); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 239 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 240 if (!ret) b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 241 input_device->dev_info_status = 0; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 242 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 243 cleanup: b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 244 complete(&input_device->wait_event); b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 245 b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 246 return; b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 247 } b95f5bcb811e390 K. Y. Srinivasan 2011-11-17 248 :::::: The code at line 218 was first introduced by commit :::::: b95f5bcb811e3905b5376f87789da8d097fee682 HID: Move the hid-hyperv driver out of staging :::::: TO: K. Y. Srinivasan :::::: CC: Jiri Kosina --- 0-DAY CI Kernel Test Service, Intel Corporation https://lists.01.org/hyperkitty/list/kbuild-all@lists.01.org