Help with confirming an error trace in drivers/input/touchscreen/ad7879-spi.c
From: Shaobo <hidden>
Date: 2017-02-16 23:16:55
From: Shaobo <hidden>
Date: 2017-02-16 23:16:55
Hi there, My name is Shaobo He and I am a graduate student at University of Utah. I am applying a static analysis tool to the Linux device drivers and got an error trace of null pointer dereference in drivers/input/touchscreen/ad7879-spi.c staring from `ad7879_spi_multi_read`: it calls `ad7879_spi_xfer` with the argument `tx_buf` being NULL, which gets dereferenced at line 52 given the argument `count` being 1 (http://lxr.free-electrons.com/source/drivers/input/touchscreen/ad7879-spi.c#L52). As you can see, the error trace is only plausible since it depends on certain conditions. To be more specific, is it possible for the count argument to be 1. Therefore, I was wondering if you could help me confirm it since you are one of the authors of this driver. Thanks for your time. I am looking forward to your reply. Best, Shaobo