Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
MIME-Version: 1.0
Date:   Fri, 11 Oct 2019 04:17:37 -0700
In-Reply-To: <20191011111732.GA25982@localhost.localdomain>
Message-ID: <00000000000061e8090594a0aa4c@google.com>
Subject: Re: Re: KMSAN: uninit-value in alauda_check_media
From:   syzbot <syzbot+e7d46eb426883fb97efd@syzkaller.appspotmail.com>
To:     Jas K <jaskaransingh7654321@gmail.com>
Cc:     gregkh@linuxfoundation.org, jaskaransingh7654321@gmail.com,
        linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org,
        stern@rowland.harvard.edu, usb-storage@lists.one-eyed-alien.net,
        syzkaller-bugs@googlegroups.com
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

> Hi, just taking a crack at this. Hope you guys don't mind.

> #syz test: https://github.com/google/kasan.git 1e76a3e5

KMSAN bugs can only be tested on https://github.com/google/kmsan.git tree
because KMSAN tool is not upstreamed yet.
See https://goo.gl/tpsmEJ#kmsan-bugs for details.


> diff --git a/drivers/usb/storage/alauda.c b/drivers/usb/storage/alauda.c
> index ddab2cd3d2e7..bb309b9ad65b 100644
> --- a/drivers/usb/storage/alauda.c
> +++ b/drivers/usb/storage/alauda.c
> @@ -452,7 +452,7 @@ static int alauda_init_media(struct us_data *us)
>   static int alauda_check_media(struct us_data *us)
>   {
>   	struct alauda_info *info = (struct alauda_info *) us->extra;
> -	unsigned char status[2];
> +	unsigned char *status = us->iobuf;
>   	int rc;

>   	rc = alauda_get_media_status(us, status);