[coreboot] [v2] r4474 - in trunk/payloads/libpayload: drivers/usb include/usb libc

svn at coreboot.org svn at coreboot.org
Fri Jul 31 13:39:56 CEST 2009


Author: stepan
Date: 2009-07-31 13:39:55 +0200 (Fri, 31 Jul 2009)
New Revision: 4474

Modified:
   trunk/payloads/libpayload/drivers/usb/uhci.c
   trunk/payloads/libpayload/drivers/usb/uhci_rh.c
   trunk/payloads/libpayload/drivers/usb/usb.c
   trunk/payloads/libpayload/drivers/usb/usbhid.c
   trunk/payloads/libpayload/drivers/usb/usbhub.c
   trunk/payloads/libpayload/drivers/usb/usbmsc.c
   trunk/payloads/libpayload/include/usb/usb.h
   trunk/payloads/libpayload/libc/lar.c
   trunk/payloads/libpayload/libc/malloc.c
   trunk/payloads/libpayload/libc/readline.c
Log:
Catch various cases in libpayload where malloc() or memalign() return NULL

Signed-off-by: Stefan Reinauer <stepan at coresystems.de>
Acked-by: Peter Stuge <peter at stuge.se>


Modified: trunk/payloads/libpayload/drivers/usb/uhci.c
===================================================================
--- trunk/payloads/libpayload/drivers/usb/uhci.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/drivers/usb/uhci.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -130,7 +130,13 @@
 	int i;
 	hci_t *controller = new_controller ();
 
+	if (!controller)
+		usb_fatal("Could not create USB controller instance.\n");
+
 	controller->instance = malloc (sizeof (uhci_t));
+	if(!controller->instance)
+		usb_fatal("Not enough memory creating USB controller instance.\n");
+
 	controller->start = uhci_start;
 	controller->stop = uhci_stop;
 	controller->reset = uhci_reset;
@@ -157,6 +163,9 @@
 	pci_write_config32 (controller->bus_address, 0xc0, 0x8f00);
 
 	UHCI_INST (controller)->framelistptr = memalign (0x1000, 1024 * sizeof (flistp_t *));	/* 4kb aligned to 4kb */
+	if (! UHCI_INST (controller)->framelistptr)
+		usb_fatal("Not enough memory for USB frame list pointer.\n");
+
 	memset (UHCI_INST (controller)->framelistptr, 0,
 		1024 * sizeof (flistp_t));
 
@@ -168,6 +177,8 @@
 	          for some reason. Not a problem now.
 	   */
 	td_t *antiberserk = memalign(16, sizeof(td_t));
+	if (!antiberserk)
+		usb_fatal("Not enough memory for chipset workaround.\n");
 	memset(antiberserk, 0, sizeof(td_t));
 
 	UHCI_INST (controller)->qh_prei = memalign (16, sizeof (qh_t));
@@ -175,6 +186,12 @@
 	UHCI_INST (controller)->qh_data = memalign (16, sizeof (qh_t));
 	UHCI_INST (controller)->qh_last = memalign (16, sizeof (qh_t));
 
+	if (! UHCI_INST (controller)->qh_prei ||
+	    ! UHCI_INST (controller)->qh_intr ||
+	    ! UHCI_INST (controller)->qh_data ||
+	    ! UHCI_INST (controller)->qh_last)
+		usb_fatal ("Not enough memory for USB controller queues.\n");
+
 	UHCI_INST (controller)->qh_prei->headlinkptr.ptr =
 		virt_to_phys (UHCI_INST (controller)->qh_intr);
 	UHCI_INST (controller)->qh_prei->headlinkptr.queue_head = 1;
@@ -508,11 +525,16 @@
 	td_t *tds = memalign(16, sizeof(td_t) * reqcount);
 	qh_t *qh = memalign(16, sizeof(qh_t));
 
+	if (!data || !tds || !qh)
+		usb_fatal ("Not enough memory to create USB intr queue prerequisites.\n");
+
 	qh->elementlinkptr.ptr = virt_to_phys(tds);
 	qh->elementlinkptr.queue_head = 0;
 	qh->elementlinkptr.terminate = 0;
 
 	intr_q *q = malloc(sizeof(intr_q));
+	if (!q)
+		usb_fatal ("Not enough memory to create USB intr queue.\n");
 	q->qh = qh;
 	q->tds = tds;
 	q->data = data;

Modified: trunk/payloads/libpayload/drivers/usb/uhci_rh.c
===================================================================
--- trunk/payloads/libpayload/drivers/usb/uhci_rh.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/drivers/usb/uhci_rh.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -157,6 +157,9 @@
 	uhci_rh_enable_port (dev, 1);
 	uhci_rh_enable_port (dev, 2);
 	dev->data = malloc (sizeof (rh_inst_t));
+	if (!dev->data)
+		usb_fatal ("Not enough memory for UHCI RH.\n");
+
 	RH_INST (dev)->port[0] = -1;
 	RH_INST (dev)->port[1] = -1;
 

Modified: trunk/payloads/libpayload/drivers/usb/usb.c
===================================================================
--- trunk/payloads/libpayload/drivers/usb/usb.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/drivers/usb/usb.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -33,14 +33,16 @@
 hci_t *usb_hcs = 0;
 
 hci_t *
-new_controller ()
+new_controller (void)
 {
 	hci_t *controller = malloc (sizeof (hci_t));
 
-	/* atomic */
-	controller->next = usb_hcs;
-	usb_hcs = controller;
-	/* atomic end */
+	if (controller) {
+		/* atomic */
+		controller->next = usb_hcs;
+		usb_hcs = controller;
+		/* atomic end */
+	}
 
 	return controller;
 }
@@ -48,13 +50,13 @@
 void
 detach_controller (hci_t *controller)
 {
-	if (controller == 0)
+	if (controller == NULL)
 		return;
 	if (usb_hcs == controller) {
 		usb_hcs = controller->next;
 	} else {
 		hci_t *it = usb_hcs;
-		while (it != 0) {
+		while (it != NULL) {
 			if (it->next == controller) {
 				it->next = controller->next;
 				return;
@@ -386,3 +388,10 @@
 	newdev_t->init (newdev_t);
 	return newdev;
 }
+
+void
+usb_fatal (const char *message)
+{
+	printf(message);
+	for (;;) ;
+}

Modified: trunk/payloads/libpayload/drivers/usb/usbhid.c
===================================================================
--- trunk/payloads/libpayload/drivers/usb/usbhid.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/drivers/usb/usbhid.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -169,6 +169,8 @@
 			boot_protos[interface->bInterfaceProtocol]);
 		if (interface->bInterfaceProtocol == hid_boot_proto_keyboard) {
 			dev->data = malloc (sizeof (usbhid_inst_t));
+			if (!dev->data)
+				usb_fatal("Not enough memory for USB HID device.\n");
 			printf ("  configuring...\n");
 			usb_hid_set_protocol(dev, interface, hid_proto_boot);
 			usb_hid_set_idle(dev, interface, 0);

Modified: trunk/payloads/libpayload/drivers/usb/usbhub.c
===================================================================
--- trunk/payloads/libpayload/drivers/usb/usbhub.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/drivers/usb/usbhub.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -128,6 +128,9 @@
 
 	dev->data = malloc (sizeof (usbhub_inst_t));
 
+	if (!dev->data)
+		usb_fatal("Not enough memory for USB hub.\n");
+
 	HUB_INST (dev)->descriptor =
 		(hub_descriptor_t *) get_descriptor (dev,
 						     gen_bmRequestType
@@ -137,6 +140,9 @@
 	HUB_INST (dev)->num_ports = HUB_INST (dev)->descriptor->bNbrPorts;
 	HUB_INST (dev)->ports =
 		malloc (sizeof (int) * (HUB_INST (dev)->num_ports + 1));
+	if (! HUB_INST (dev)->ports)
+		usb_fatal("Not enough memory for USB hub ports.\n");
+
 	for (i = 1; i <= HUB_INST (dev)->num_ports; i++)
 		HUB_INST (dev)->ports[i] = -1;
 	for (i = 1; i <= HUB_INST (dev)->num_ports; i++)

Modified: trunk/payloads/libpayload/drivers/usb/usbmsc.c
===================================================================
--- trunk/payloads/libpayload/drivers/usb/usbmsc.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/drivers/usb/usbmsc.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -346,6 +346,9 @@
 	}
 
 	dev->data = malloc (sizeof (usbmsc_inst_t));
+	if (!dev->data)
+		usb_fatal("Not enough memory for USB MSC device.\n");
+
 	MSC_INST (dev)->bulk_in = 0;
 	MSC_INST (dev)->bulk_out = 0;
 

Modified: trunk/payloads/libpayload/include/usb/usb.h
===================================================================
--- trunk/payloads/libpayload/include/usb/usb.h	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/include/usb/usb.h	2009-07-31 11:39:55 UTC (rev 4474)
@@ -226,4 +226,6 @@
 
 void usb_detach_device(hci_t *controller, int devno);
 int usb_attach_device(hci_t *controller, int hubaddress, int port, int lowspeed);
+
+void usb_fatal(const char *message) __attribute__ ((noreturn));
 #endif

Modified: trunk/payloads/libpayload/libc/lar.c
===================================================================
--- trunk/payloads/libpayload/libc/lar.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/libc/lar.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -113,6 +113,10 @@
 	 * tear on the heap */
 
 	lar->headers = malloc(16 * sizeof(void *));
+
+	if (!lar->headers)
+		return NULL;
+
 	lar->alloc = 16;
 	lar->count = lar->eof = 0;
 	lar->cindex = 0;

Modified: trunk/payloads/libpayload/libc/malloc.c
===================================================================
--- trunk/payloads/libpayload/libc/malloc.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/libc/malloc.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -309,6 +309,8 @@
 	if (size == 0) return 0;
 	if (align_regions == 0) {
 		align_regions = malloc(sizeof(struct align_region_t));
+		if (align_regions == NULL)
+			return NULL;
 		memset(align_regions, 0, sizeof(struct align_region_t));
 	}
 	struct align_region_t *reg = align_regions;

Modified: trunk/payloads/libpayload/libc/readline.c
===================================================================
--- trunk/payloads/libpayload/libc/readline.c	2009-07-31 11:38:59 UTC (rev 4473)
+++ trunk/payloads/libpayload/libc/readline.c	2009-07-31 11:39:55 UTC (rev 4474)
@@ -55,6 +55,8 @@
 	if (!readline_buffer || !readline_bufferlen) {
 #define READLINE_BUFFERSIZE	256
 		readline_buffer = malloc(READLINE_BUFFERSIZE);
+		if (!readline_buffer)
+			return NULL;
 		readline_bufferlen = READLINE_BUFFERSIZE;
 		memset(readline_buffer, 0, readline_bufferlen);
 	}





More information about the coreboot mailing list