Hello, I tried another script for the semantic patch language out. This source code analysis approach points out that the implementation of the function “iwl_req_fw_callback” contains still an unchecked call of the function “kmemdup”. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/net/wireless/intel/iwlwifi/iwl-drv.c?id=1c0cc5f1ae5ee5a6913704c0d75a6e99604ee30a#n1454 https://elixir.bootlin.com/linux/v5.4-rc2/source/drivers/net/wireless/intel/iwlwifi/iwl-drv.c#L1454 Can it be that just an other data structure member should be used for the desired null pointer check at this place? Regards, Markus
