Re: [syzbot] [usb?] KMSAN: uninit-value in bcmp (3)

From: Qianqiang Liu
Date: Sun Oct 06 2024 - 12:55:55 EST


#syz test

diff --git a/drivers/usb/misc/iowarrior.c b/drivers/usb/misc/iowarrior.c
index 6d28467ce352..ad2a9c09987c 100644
--- a/drivers/usb/misc/iowarrior.c
+++ b/drivers/usb/misc/iowarrior.c
@@ -832,9 +832,8 @@ static int iowarrior_probe(struct usb_interface *interface,
iowarrior_callback, dev,
dev->int_in_endpoint->bInterval);
/* create an internal buffer for interrupt data from the device */
- dev->read_queue =
- kmalloc_array(dev->report_size + 1, MAX_INTERRUPT_BUFFER,
- GFP_KERNEL);
+ dev->read_queue = kcalloc(dev->report_size + 1, MAX_INTERRUPT_BUFFER,
+ GFP_KERNEL);
if (!dev->read_queue)
goto error;
/* Get the serial-number of the chip */

--
Best,
Qianqiang Liu