mailing list of musl libc
 help / color / mirror / code / Atom feed
From: Rich Felker <dalias@libc.org>
To: musl@lists.openwall.com
Subject: Re: Static analysis results
Date: Thu, 23 Apr 2015 12:41:51 -0400	[thread overview]
Message-ID: <20150423164150.GG17573@brightrain.aerifal.cx> (raw)
In-Reply-To: <alpine.LNX.2.11.1504211857020.2677@monopod.intra.ispras.ru>

Aside from regcomp which I want to ask nsz on before committing
anything, I believe these are all fixed now by the following commits:

On Tue, Apr 21, 2015 at 07:28:30PM +0300, Alexander Monakov wrote:
> New round of static analysis results.  This time it's mostly opportunities for
> very minor cleanups (I'm showing only a few results that I think make sense).
> If there's a problem in balance of usefulness vs annoyance, please let me know.
> 
> dynlink.c:343
>   'if (runtime)' is already established as true at line 337

c5ab5bd3be15eb9d49222df132a51ae8e8f78cbc remove always-true conditional in dynamic linker TLSDESC processing

> sem_open.c:sem_open
>   I didn't try to follow the code in detail, but it seems possible that 'goto
>   fail' can be executed from e.g. line 133 after successful mmap, in which
>   case the region is not unmapped

086793ad99dc625fd1c47f96fc31ea8aa316b438 fix mmap leak in sem_open failure path for link call

> duplocale.c:17
>   neither of the conditions cannot hold

873e0ec7fc4d466cfcdec16a7648cc18609ba702 fix duplocale clobbering of new locale struct with memcpy of old

> dynlink.c:1503
>   the first two conditions cannot hold after check at line 1489 and exit at
>   line 1501

97b72d22ad53e8f1306bf8e943571b698058f49d remove redundant code in do_dlsym function

> fcntl.c:42
>   F_SETLKW is already taken care of at line 16
>   also, why does this file cast arg to 'void *' in several places?

ea1b6bb6123d2177508ddca438669ec96cfa0021 remove dead case for F_SETLKW in fcntl

> regcomp.c:2848
>   condition 'stack != NULL' cannot hold

[open but not a bug]

> dynlink.c:428
>   on 64-bit arches, multiplication can overflow in 32-bit type before assignment 

[not considered a bug at this time; see other email]

Rich


  parent reply	other threads:[~2015-04-23 16:41 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-04-21 16:28 Alexander Monakov
2015-04-21 16:39 ` Alexander Monakov
2015-04-21 16:57 ` Rich Felker
2015-04-23 16:41 ` Rich Felker [this message]
2015-04-23 18:08   ` Szabolcs Nagy

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20150423164150.GG17573@brightrain.aerifal.cx \
    --to=dalias@libc.org \
    --cc=musl@lists.openwall.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.vuxu.org/mirror/musl/

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).