The patch titled drivers/message: Move dereference after NULL test has been added to the -mm tree. Its filename is drivers-message-move-dereference-after-null-test.patch Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/SubmitChecklist when testing your code *** See http://userweb.kernel.org/~akpm/stuff/added-to-mm.txt to find out what to do about this The current -mm tree may be found at http://userweb.kernel.org/~akpm/mmotm/ ------------------------------------------------------ Subject: drivers/message: Move dereference after NULL test From: Julia Lawall <julia@xxxxxxx> If the NULL test on dev->i2o_dev or i2o_dev is needed, then the dereference should be after the NULL test. A simplified version of the semantic match that detects this problem is as follows (http://coccinelle.lip6.fr/): // <smpl> @match exists@ expression x, E; identifier fld; @@ * x->fld ... when != \(x = E\|&x\) * x == NULL // </smpl> Signed-off-by: Julia Lawall <julia@xxxxxxx> Cc: James Bottomley <James.Bottomley@xxxxxxx> Cc: Kashyap Desai <kashyap.desai@xxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- drivers/message/i2o/i2o_block.c | 3 ++- drivers/message/i2o/i2o_scsi.c | 3 +-- 2 files changed, 3 insertions(+), 3 deletions(-) diff -puN drivers/message/i2o/i2o_block.c~drivers-message-move-dereference-after-null-test drivers/message/i2o/i2o_block.c --- a/drivers/message/i2o/i2o_block.c~drivers-message-move-dereference-after-null-test +++ a/drivers/message/i2o/i2o_block.c @@ -711,7 +711,7 @@ static int i2o_block_transfer(struct req { struct i2o_block_device *dev = req->rq_disk->private_data; struct i2o_controller *c; - u32 tid = dev->i2o_dev->lct_data.tid; + u32 tid; struct i2o_message *msg; u32 *mptr; struct i2o_block_request *ireq = req->special; @@ -727,6 +727,7 @@ static int i2o_block_transfer(struct req goto exit; } + tid = dev->i2o_dev->lct_data.tid; c = dev->i2o_dev->iop; msg = i2o_msg_get(c); diff -puN drivers/message/i2o/i2o_scsi.c~drivers-message-move-dereference-after-null-test drivers/message/i2o/i2o_scsi.c --- a/drivers/message/i2o/i2o_scsi.c~drivers-message-move-dereference-after-null-test +++ a/drivers/message/i2o/i2o_scsi.c @@ -528,7 +528,6 @@ static int i2o_scsi_queuecommand(struct * Do the incoming paperwork */ i2o_dev = SCpnt->device->hostdata; - c = i2o_dev->iop; SCpnt->scsi_done = done; @@ -538,7 +537,7 @@ static int i2o_scsi_queuecommand(struct done(SCpnt); goto exit; } - + c = i2o_dev->iop; tid = i2o_dev->lct_data.tid; osm_debug("qcmd: Tid = %03x\n", tid); _ Patches currently in -mm which might be from julia@xxxxxxx are origin.patch linux-next.patch drivers-scsi-libsas-use-sam_good.patch drivers-block-dac960c-use-dac960_v2_controller.patch drivers-char-ipmi-use-kcs_idle_state.patch drivers-message-move-dereference-after-null-test.patch drivers-acpi-move-dereference-after-null-test.patch drivers-media-video-move-dereference-after-null-test.patch drivers-mmc-move-dereference-after-null-test.patch drivers-cpuidle-move-dereference-after-null-test.patch drivers-video-move-dereference-after-null-test.patch drivers-ata-libata-move-dereference-after-null-test.patch drivers-scsi-remove-unnecessary-null-test.patch arch-arm-plat-omap-drop-an-unnecessary-null-test.patch arch-arm-plat-s3c24xx-move-dereference-after-null-test.patch -- To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html