Re: [Bugme-new] [Bug 9569] New: NULL pointer dereference on drivers/usb/host/ehci-q.c

On Fri, 14 Dec 2007 19:24:38 -0800 (PST) [email protected] wrote:

> http://bugzilla.kernel.org/show_bug.cgi?id=9569
> 
>            Summary: NULL pointer dereference on drivers/usb/host/ehci-q.c
>            Product: Drivers
>            Version: 2.5
>      KernelVersion: 2.6.23
>           Platform: All
>         OS/Version: Linux
>               Tree: Mainline
>             Status: NEW
>           Severity: normal
>           Priority: P1
>          Component: USB
>         AssignedTo: [email protected]
>         ReportedBy: [email protected]
> 
> 
> There is a NULL pointer dereference at drivers/usb/host/ehci-q.c, line 742.
> The pointer that is null at that line is urb->dev->tt. The reason for the
> error is as follows:
> 
> (1) Assume the if-condition at line 663 is true
> (2) assume the if-condition at line 668 is false
> (3) assume the ?-condition at line 699 is false. Then it must be the case
>     that "tt" is NULL. But this implies that urb->dev->tt is also NULL at
>     line 683, which reads  "struct usb_tt *tt = urb->dev->tt;"
> 
> (4) the first disjunct at the "if" statement on line 731 evaluates to true
> (5) the statement at line 742 executes with urb->dev->tt  NULL.
> 

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
[email protected]
To unsubscribe, use the last form field at:
https://lists.sourceforge.net/lists/listinfo/linux-usb-devel