shift/mask issue in drivers/media/dvb/dvb-usb/mxl111sf-demod.c
From: Colin King (gmail)
Date: Mon Oct 14 2024 - 19:21:38 EST
Hi,
Static analysis has found a shift/mask issue in
drivers/media/dvb/dvb-usb/mxl111sf-demod.c in function
mxl1x1sf_demod_get_tps_hierarchy(), as described as follows:
/* bit<6:4> - 000:Non hierarchy, 001:1, 010:2, 011:4 */
if (mxl_fail(ret))
goto fail;
switch ((val & V6_TPS_HIERARCHY_INFO_MASK) >> 6) {
case 0:
*hierarchy = HIERARCHY_NONE;
break;
case 1:
*hierarchy = HIERARCHY_1;
break;
case 2:
*hierarchy = HIERARCHY_2;
break;
case 3:
*hierarchy = HIERARCHY_4;
break;
}
There are two issues. First, the comment states the bits of interest are
bits <6:4> and yet the shift is by 6 bits, I suspect that should be a 4
bit shift. Secondly, V6_TPS_HIERARCHY_INFO_MASK is defined in
drivers/media/usb/dvb-usb-v2/mxl111sf-reg.h as:
#define V6_TPS_HIERARCHY_INFO_MASK 0x40
..so only one bit is being masked, I suspect it should be (0x7 << 4) or
0x70 for the 3 bits <6:3> or maybe just (0x3 << 4) or 0x30 if we're just
interested in the bottom two bits for the case 0..3.
Anyhow, I don't have the hardware manual or hardware to test specific
fixes and I'm 100% about making a fix based on the comment w/o the
hardware to test this on.
Colin