Commit a1c4560d authored by Dan Carpenter's avatar Dan Carpenter Committed by Dave Airlie

drivers/gpu/drm/drm_sysfs.c: sysfs files error handling

In the original code we used "j" as an iterator but we used "i" as an
index.

-               for (j = 0; j < i; j++)
-                       device_remove_file(&connector->kdev,
-                                          &connector_attrs[i]);

Smatch complained about that because "i" was potentially passed the end of
the array.  Which makes sense if we should be using "j" there.

I also thought that we should remove the files for &connector_attrs_opt1
but to do that I had to add separate iterators for &connector_attrs and
&connector_attrs_opt1.
Signed-off-by: default avatarDan Carpenter <error27@gmail.com>
Cc: Greg Kroah-Hartman <gregkh@suse.de>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarDave Airlie <airlied@redhat.com>
parent 0031c41b
...@@ -353,7 +353,10 @@ static struct bin_attribute edid_attr = { ...@@ -353,7 +353,10 @@ static struct bin_attribute edid_attr = {
int drm_sysfs_connector_add(struct drm_connector *connector) int drm_sysfs_connector_add(struct drm_connector *connector)
{ {
struct drm_device *dev = connector->dev; struct drm_device *dev = connector->dev;
int ret = 0, i, j; int attr_cnt = 0;
int opt_cnt = 0;
int i;
int ret = 0;
/* We shouldn't get called more than once for the same connector */ /* We shouldn't get called more than once for the same connector */
BUG_ON(device_is_registered(&connector->kdev)); BUG_ON(device_is_registered(&connector->kdev));
...@@ -376,8 +379,8 @@ int drm_sysfs_connector_add(struct drm_connector *connector) ...@@ -376,8 +379,8 @@ int drm_sysfs_connector_add(struct drm_connector *connector)
/* Standard attributes */ /* Standard attributes */
for (i = 0; i < ARRAY_SIZE(connector_attrs); i++) { for (attr_cnt = 0; attr_cnt < ARRAY_SIZE(connector_attrs); attr_cnt++) {
ret = device_create_file(&connector->kdev, &connector_attrs[i]); ret = device_create_file(&connector->kdev, &connector_attrs[attr_cnt]);
if (ret) if (ret)
goto err_out_files; goto err_out_files;
} }
...@@ -393,8 +396,8 @@ int drm_sysfs_connector_add(struct drm_connector *connector) ...@@ -393,8 +396,8 @@ int drm_sysfs_connector_add(struct drm_connector *connector)
case DRM_MODE_CONNECTOR_SVIDEO: case DRM_MODE_CONNECTOR_SVIDEO:
case DRM_MODE_CONNECTOR_Component: case DRM_MODE_CONNECTOR_Component:
case DRM_MODE_CONNECTOR_TV: case DRM_MODE_CONNECTOR_TV:
for (i = 0; i < ARRAY_SIZE(connector_attrs_opt1); i++) { for (opt_cnt = 0; opt_cnt < ARRAY_SIZE(connector_attrs_opt1); opt_cnt++) {
ret = device_create_file(&connector->kdev, &connector_attrs_opt1[i]); ret = device_create_file(&connector->kdev, &connector_attrs_opt1[opt_cnt]);
if (ret) if (ret)
goto err_out_files; goto err_out_files;
} }
...@@ -413,10 +416,10 @@ int drm_sysfs_connector_add(struct drm_connector *connector) ...@@ -413,10 +416,10 @@ int drm_sysfs_connector_add(struct drm_connector *connector)
return 0; return 0;
err_out_files: err_out_files:
if (i > 0) for (i = 0; i < opt_cnt; i++)
for (j = 0; j < i; j++) device_remove_file(&connector->kdev, &connector_attrs_opt1[i]);
device_remove_file(&connector->kdev, for (i = 0; i < attr_cnt; i++)
&connector_attrs[i]); device_remove_file(&connector->kdev, &connector_attrs[i]);
device_unregister(&connector->kdev); device_unregister(&connector->kdev);
out: out:
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment