Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
From:   YE Chengfeng <cyeaa@connect.ust.hk>
To:     "alison.schofield@intel.com" <alison.schofield@intel.com>,
        "vishal.l.verma@intel.com" <vishal.l.verma@intel.com>,
        "ira.weiny@intel.com" <ira.weiny@intel.com>,
        "ben.widawsky@intel.com" <ben.widawsky@intel.com>,
        "dan.j.williams@intel.com" <dan.j.williams@intel.com>,
        "Jonathan.Cameron@huawei.com" <Jonathan.Cameron@huawei.com>
CC:     "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: drivers/cxl: suspected null pointer dereference in core/bus.c
Thread-Topic: drivers/cxl: suspected null pointer dereference in core/bus.c
Thread-Index: AdfLJaDBodqHZTJVQG6Of5lGN9neHw==
Date:   Wed, 27 Oct 2021 11:35:25 +0000
Message-ID: <TYCP286MB1188F633AE0B7A52EB6917478A859@TYCP286MB1188.JPNP286.PROD.OUTLOOK.COM>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?YxyZ+tviI+ZRpg6Md4WHlEpd2Bbfr8W/dmOe3pdPWn0XGvD7vU8qiICZRZSs?=
 =?us-ascii?Q?yi83DusVhEI7piumjmNdTEnrO08AU0u9dUGN3Y9sNbWWGah8zeONC7JvNbkv?=
 =?us-ascii?Q?9wyNWUDkBDKRyvOpaJ1U15u30XS7Jf0Oljo+NkjYEXJwC9ZJocZmbzkdSy+a?=
 =?us-ascii?Q?cMCX3Ss1383Dvsw9yC/M4oMgikTnhtECtJEZekjmofmT0PQfTNUkAd34sRQ6?=
 =?us-ascii?Q?T6dRY5XJnEMkuX0Pin+mFxYvgV8Fp2sn+OmEJtZevTEqCUehQH99t/UFLkmE?=
 =?us-ascii?Q?l8/PItRO0LosB14hsAjW1vMnReougW6JAUAWDbe7E24KUqHQqW/nsUmvYVRV?=
 =?us-ascii?Q?6ha3gqpopaPCrnYxpAYnRzbCxMiwC0j2IPtBDz4NDBC8M7W4KjuVFbS1qQ+v?=
 =?us-ascii?Q?/F9yXFEUncIS8ub8yvSHIwAQfpHgHoFsZ4Kwd2n1wKgfCzQ1HgKNmJwN0wdT?=
 =?us-ascii?Q?gCknBR6Yd8tP42Tg2wcF+so16ikwcPlxSGtWshz2+fGL5IWtx4S+6FNTiF/J?=
 =?us-ascii?Q?Lno2z8ylFaQX7UOOlflp8qT0zW/EqEMHk9P5RmDT8pgQ3OeSM5/4oh/qybYv?=
 =?us-ascii?Q?Yi8XNfdtlzzAiZdXireh7yHT5pWUtrrZ0xayD8x3kBZZVVKZ6WrKY9nlN1Ll?=
 =?us-ascii?Q?h37OJ3i+uBq9yl8iS+pPmMFJITIqH0TnEJx5a21YIQH5IvfB6ZO5CZ4xPqDt?=
 =?us-ascii?Q?KOGy8SaNbrJc+l8iAy6U+XI21UVlEaRRk+Z+jaStwGWNLPJpDG8cflEKMbFP?=
 =?us-ascii?Q?UUfy41YoobsZLrbgYsMVBDjSr/WFbSoQ3Z4Lp+rVXoTm/VA+gLkUB9bX/JXf?=
 =?us-ascii?Q?oMxHFn0V/+MDYWXWjkfffVXAnBMYH8qj3VkuTcuke4vmNybi+xaZMh9Y71P4?=
 =?us-ascii?Q?eItqG0CdGS6m7Jr9jmWA6q8NQi1IbJNDbwNIZIeesfWB+bzmv0FuQoVfwrEW?=
 =?us-ascii?Q?tSN43hvO217L7YKE1c9MItVkhUumSMPJJud1YsGj0MP5wW2wg4Pr5118tkuE?=
 =?us-ascii?Q?UWz+++GdzaYcKw7vb4zwEj1QVAw+TIDD336XR2nNpRzRnlk+9aJYcTSxfUzb?=
 =?us-ascii?Q?jJFvHVjysbQtfk5KtWCA7tLLZmY/xRqeeQp6Dtsgb/y0G71Lf9AVhvCFpm54?=
 =?us-ascii?Q?hPFqtpCZCw8zVwTF+ccdz4gMeImd9elcpp2ukAW20ap+d5jBa1bLu0u067Az?=
 =?us-ascii?Q?ZTZpMbLXC5RajGUWthvfqpKxw0YKiF6kteAVnqoM4hmaGmvZk6LJsAOlOxnb?=
 =?us-ascii?Q?DytdTAWNKHsUMA8N7MgIq3+R4o+HYGBbkkonsjdPKd8Ay9LphmN5tLNWpV+h?=
 =?us-ascii?Q?ZDah6oUuwPebug0rEzbF29iBgPWrxLuJtYALwbTzLmR3qjEWHcOf7I48gTje?=
 =?us-ascii?Q?RXs6h0yopWV2B3dU5pZUXz7SdSRbFHFPhjZrq8F0BUhyFLyb9VmOc0HTjcOD?=
 =?us-ascii?Q?EslGOHuycQS2vhp9Fq2X7ztCYp2DnyUUOpV2AAP8Kr8bdt0fRGHyAlFTE969?=
 =?us-ascii?Q?ema+PTi9iVz6/qLGj1dijKWAsLO2rWAW3OJKhwy0OF4ZtsgC6jHgafCQH1q8?=
 =?us-ascii?Q?VNUr8YLG5nvmcQjG7l5lkQJ5uwtX4IOU574sb7Y6jGyZEARHW5N/LIRqhLKv?=
 =?us-ascii?Q?GOBmqs9f8OJ8YI3QgSnhjKs=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: connect.ust.hk
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: TYCP286MB1188.JPNP286.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: ea5e9ac5-8522-4bf9-3baf-08d9993dde7a
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2021 11:35:25.2411
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 6c1d4152-39d0-44ca-88d9-b8d6ddca0708
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: bw4sJj1vS8zuHXDI7xgjzjXYPK6pkKI+HqHSXMjBiIatCKl5ntkk3QSUMN0rBCe9L4N9EFtChOi9rSxFttLu/w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYCP286MB0655
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Hi,

https://github.com/torvalds/linux/blob/master/drivers/cxl/core/bus.c#L98

We notice that in multiple call sites, the return pointer of to_cxl_decoder=
 is not null-checked, could it be a potential null-pointer-dereference prob=
lem?

This is detected by our experimental static analysis tool, it could be fals=
e positive, we manually check and report those we think may be true issues.=
 Would you like to have a look at them?

Thanks so much,
Chengfeng