Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Wed, 5 Oct 2022 17:58:14 +0300
From:   Dan Carpenter <dan.carpenter@oracle.com>
To:     Enzo Matsumiya <ematsumiya@suse.de>
Cc:     Muhammad Usama Anjum <usama.anjum@collabora.com>,
        Steve French <sfrench@samba.org>, Paulo Alcantara <pc@cjr.nz>,
        Ronnie Sahlberg <lsahlber@redhat.com>,
        Shyam Prasad N <sprasad@microsoft.com>,
        Tom Talpey <tom@talpey.com>, kernel@collabora.com,
        kernel-janitors@vger.kernel.org, linux-cifs@vger.kernel.org,
        samba-technical@lists.samba.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH 1/2] cifs: remove initialization value
Message-ID: <Yz2bhrotBMO6JwPw@kadam>
References: <20221004062333.416225-1-usama.anjum@collabora.com>
 <20221004142306.ysgh45nhgdo4z3ok@suse.de>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20221004142306.ysgh45nhgdo4z3ok@suse.de>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?PDze+oclWOY2maGM2RIDoDlkysFl4SAnS47lfQsjvmv5P0Hl+nT+xubk9WXS?=
 =?us-ascii?Q?upmpIlHhSbP70IBhrA/Gk/AT/56RAnl+NgGhmzKD2zxhUrNiXSaDqVGu0kyr?=
 =?us-ascii?Q?KTjxf+1PU+v/++7XYFr0ztjTBvyLm5Qg8j9pJKPOVP/aJh9FQxJ+fcQsKJUS?=
 =?us-ascii?Q?Aw9XFhN0uwam04ekN67tsHz8AUShoPq+YKl2j6iPY/XxnL0tb+XHpdAxTIW+?=
 =?us-ascii?Q?/VRxZYrQoX5nRpkbfwQhpVob3Ai6f94GUGSvbxAJ/HRULmzlMDlU6fAGoeC7?=
 =?us-ascii?Q?Ieg74P+TSZmljhiSOFjAxaRu31oNlBOSFferhQiHc2YC/hsB939jKdzXokuG?=
 =?us-ascii?Q?iibmAQFpv6uVtX77riWjT6tOHJSrTXgi6VV1Jcf9piSUO1H37+ELX/GfdzJT?=
 =?us-ascii?Q?A4T9mte11NK62WFPhvcbVRM5X5H+woIQ3fUoH6P7Q+oQUrtiVjKsC4ci1wZr?=
 =?us-ascii?Q?PXD8wWLMLg35hZWI31IitubB7hvf/+j3tYR4ZuZkQINCWX79IMiCDAn3GQYd?=
 =?us-ascii?Q?JFou2dH0RXfOYp4y8EI5pKLe7ROnTCOromS3lvcnMMMDeHKquTAqL1AALGsr?=
 =?us-ascii?Q?/RO7SvdO1pDMicxh1CSOmQzsIUK5hqVampWnbZcB9pDDfbcG6Z1AaIsVkStw?=
 =?us-ascii?Q?0m2ZjhafG257mgRTlVHAgtKt8pc+Tw/gvmItO4qDRl2TwQ6BEwQ6dOz9cao7?=
 =?us-ascii?Q?kI4XHPbabROK7jnME1llncpRbg93XG8b3UaroOKGh16X4k43jfkZUwlKhIka?=
 =?us-ascii?Q?68OI4L5KCbJ1xc7KhZzkdZPWoWyj5lelnwWB2H/Sr7uWb5CVGIF+SOQ10TqD?=
 =?us-ascii?Q?tUa4EK1bqhVHAe+unkJECFE3GcXm2AFx+MGbWLtBF1/ySSrMmYiucgOuRNRV?=
 =?us-ascii?Q?lP1wjEfIuJ3dGlbxe0CDm+yXff7e3MTOo1pEqypYaxNyVxDrPVF8jivnbhFq?=
 =?us-ascii?Q?QGVNW8+fywoW9eAhuVC9fhg9Ag72ZVurfDr+Mjs3j160vyPzuT4HAy0CHr1f?=
 =?us-ascii?Q?+7J3uW2P+X4FBHyqpil1Kgabs90EiQTUA8uXT/TFKzuvhZAcC4gsHrP/TfFz?=
 =?us-ascii?Q?df/+kEHa+X7Iw9ePQrKHM6GL3k7W62I7BHQkZPiPSU6V5NofnhCi2ahm6s2p?=
 =?us-ascii?Q?g7qza3Y49FhDa5RWgzWSLaMFX1G95Le3rdSqE2Fwsb0bIk39TmCskJLvCYlo?=
 =?us-ascii?Q?qdD3S/wamqKZoEakKFmt1aZQzAlvusQVpvREh66BUwNKGF4S1AZc/wM6M2vH?=
 =?us-ascii?Q?ZRlR4aoLwtRN/gzHkF8OvQqrZGqhu0p16wqZDZqUaSM7/d8L6TLJrMrz7cLj?=
 =?us-ascii?Q?IkcjKsM0Am68HCWca7VdyTrUh2OIN9BERRrhJJEFy7PRFHqlxt8hNVpqTXwY?=
 =?us-ascii?Q?C64mX6Jlr8eY/s2PXiIPP6FLHBAjpMR39q3P6V63Jdas/RoI7v/tWRhGZN5z?=
 =?us-ascii?Q?TGO1AEJRu3sWwBBCFWkEa/RIlcDn9FB/BwLHt1Bn3db8efX6sOm6ZRDqdpW4?=
 =?us-ascii?Q?PKSiWgGw6VeE7FbW6jdPfsXd7HL0GD7xF4Wwn4hjaz5j8rljYZsJwZ+6vdBh?=
 =?us-ascii?Q?IirrP8eus1yHgZfBT6uYDNbel2J2FeqaIZLvL12qiAAabl+/wm9r3AkQbVpj?=
 =?us-ascii?Q?nw=3D=3D?=
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: =?us-ascii?Q?J7n66R5tkdSQUGWVPNS3thRDBuMDCsRQ8RBPxJNLWJ/1srrAj76zGyBdYKz8?=
 =?us-ascii?Q?OPnNvSB7AQ7i8B0NLY7/WIYsY8gWqqFO0Vk/A0yRn+2dQ2eZnzWl0e3voxoU?=
 =?us-ascii?Q?T2APXLlLMyt3P6Xo+AwWxxwKvSMJaC7nzvLS2tBDw4/NjbMlD2ul6kRws1Pa?=
 =?us-ascii?Q?58SsHRPPBony2mCLwfxWULuLQpbBeMjJ1OFwrUoZ24Cra2eSHFXmbZZ2Kg7o?=
 =?us-ascii?Q?s8Et5aQ9lWWBV6kKH1gXE1CkAwkUPBZpV7nAwftHjS9tpFd3ap2JQCDakWXY?=
 =?us-ascii?Q?/TvDl6Guyiax54qtmCgcX+jWkGQh64RX3OfVuDYi9oTjqsU2gPyecNuUTgiD?=
 =?us-ascii?Q?/6p/cQMNAYw5mD5gZRRX4nA/v7vL+kO22YruPaFdZ7EA6FpA142TsjcfDkG+?=
 =?us-ascii?Q?i5W1HahML6CMmpAv2tPitRoRNeaqnis2UrnXFUd9OSDhOA53m2NSNPiCRUDW?=
 =?us-ascii?Q?dRC7KYZVnK3HI7W3yuEatN3kYRcUdBFCc9JS67fojpsfRTIVO3TJG3M01Ujh?=
 =?us-ascii?Q?8a0j7QG4Lg8mM7cvpDprMfl57dZ0uxgqAc26+vHe4hjlNCX7+w5mq4syPw+1?=
 =?us-ascii?Q?KXNEZQLkZHkO+HXUBwm3blGBfo9XCcH7mfpdlD0e732SHlPNgjHTV2Cwu6yB?=
 =?us-ascii?Q?7hzj0HdrLy+ai2NigTHKcsoZCgE83OhTtEVxV5RsN0Dkraw3SreeX+gdwPV4?=
 =?us-ascii?Q?1QdQYPXC6H/6m+fT1srQwrA2JaZ+3yrgSAemT421HK+PAaRO8dI1UM9sjXj8?=
 =?us-ascii?Q?1NZDDrNVkJ4F+YypUvqIbTPUwW5gTKtstejJeG6QG4VcxQ29jf7SbuTdt9Vi?=
 =?us-ascii?Q?gncB/PmnJZVwuYJHFurkBU6sSfhmJ5q0Y8MJSM+osHdnyer0DUFeu4sPh67C?=
 =?us-ascii?Q?4tRUATc1sxEN63WQ4zk9xY8W0VKgrHLSKbu1tzarkKD56QjuHuRUmfB04bXj?=
 =?us-ascii?Q?MGYicFYUEpsigqdnhXMhdwA3m0whDbAzQMBViXjjjxjeF+fp8bM1mU49ovRT?=
 =?us-ascii?Q?QWd655NvfpRJr+0XLw/PZ9tLMKAykguZySK1bXkQN4u0k7ZX+wfIY79GhLlP?=
 =?us-ascii?Q?AZcrjgl63Xp9PnaTUjNSYPiFwm4ADes347BtaadvAIO+Y8ZQMMcdcb8iVyuR?=
 =?us-ascii?Q?NN+Vm+3Z4Q2j?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 25970d69-533b-4135-7cd6-08daa6e20b2c
X-MS-Exchange-CrossTenant-AuthSource: MWHPR1001MB2365.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Oct 2022 14:58:21.0380
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 9L7JWfvz6i0P0kdTXcOXwpV2E5p8HUEg8PaOKTQ1nCJdt2HrhjEWKuiD2uxTE0u4mW+nDQH49Ad7lslPd0p0lGkdlxXmnkCY9yc9PyCi8qw=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR10MB6901
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.205,Aquarius:18.0.895,Hydra:6.0.528,FMLib:17.11.122.1
 definitions=2022-10-05_03,2022-10-05_01,2022-06-22_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 phishscore=0 bulkscore=0 mlxscore=0
 malwarescore=0 adultscore=0 spamscore=0 mlxlogscore=631 suspectscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2209130000
 definitions=main-2210050094
X-Proofpoint-GUID: pALgl_5HWG1F6_quQyksrWfK6dE9fFft
X-Proofpoint-ORIG-GUID: pALgl_5HWG1F6_quQyksrWfK6dE9fFft
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE autolearn=ham
        autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Tue, Oct 04, 2022 at 11:23:06AM -0300, Enzo Matsumiya wrote:
> Hi Usama,
> 
> On 10/04, Muhammad Usama Anjum wrote:
> > Don't initialize the rc as its value is being overwritten before its
> > use.
> 
> Being bitten by an unitialized variable bug as recent as 2 days ago, I'd
> say this is a step backwards from the "best practices" POV.

Zero is a random bogus value.

How likely is it that zero is the correct value or a negative error code
is correct?  There are probably a four to one ratio of error paths to
success paths in the kernel (100% made up statistic).  But mostly
success paths end in "return 0;".  So when you see a "return rc;" there
is probably less than one in ten chance that rc is potentially zero.  So
there is an over 90% chance that zero is the wrong initializer to use.

Meanwhile what initializing things to bogus values does is it disables
static analysis checking for uninitialized value bugs.  So it hides bugs
until the user hits them.

Disabling static analysis can make sense for a very complicated function
but it's not best practice in general.

On the other hand uninitialized memory is a source of security bugs.
There are two ways to prevent this:  1)  Use static analysis.  Currently
the GCC uninitialized variable warning is disabled because it is kind
of rubbish but there are other static analysis tools out there.  2)  Use
the GCC extension to automatically initialize stack data to zero.

regards,
dan carpenter