Name	Size	Mode	Actions
alloc/	-	0755	rm
debugfs/	-	0755	rm
check_bq27xxx_data.cocci	3504	0644	editdlrm
drm-get-put.cocci	1532	0644	editdlrm
d_find_alias.cocci	1309	0644	editdlrm
err_cast.cocci	1097	0644	editdlrm
kstrdup.cocci	2461	0644	editdlrm
memdup.cocci	1350	0644	editdlrm
memdup_user.cocci	1306	0644	editdlrm
platform_no_drv_owner.cocci	3869	0644	editdlrm
pm_runtime.cocci	2394	0644	editdlrm
ptr_ret.cocci	1814	0644	editdlrm
resource_size.cocci	2115	0644	editdlrm
simple_open.cocci	1244	0644	editdlrm
vma_pages.cocci	1519	0644	editdlrm

/// Use memdup_user rather than duplicating its implementation /// This is a little bit restricted to reduce false positives /// // Confidence: High // Copyright: (C) 2010-2012 Nicolas Palix. GPLv2. // Copyright: (C) 2010-2012 Julia Lawall, INRIA/LIP6. GPLv2. // Copyright: (C) 2010-2012 Gilles Muller, INRIA/LiP6. GPLv2. // URL: http://coccinelle.lip6.fr/ // Comments: // Options: --no-includes --include-headers virtual patch virtual context virtual org virtual report @depends on patch@ expression from,to,size; identifier l1,l2; @@ - to = \(kmalloc\|kzalloc\)(size,GFP_KERNEL); + to = memdup_user(from,size); if ( - to==NULL + IS_ERR(to) || ...) { <+... when != goto l1; - -ENOMEM + PTR_ERR(to) ...+> } - if (copy_from_user(to, from, size) != 0) { - <+... when != goto l2; - -EFAULT - ...+> - } @r depends on !patch@ expression from,to,size; position p; statement S1,S2; @@ * to = \(kmalloc@p\|kzalloc@p\)(size,GFP_KERNEL); if (to==NULL || ...) S1 if (copy_from_user(to, from, size) != 0) S2 @script:python depends on org@ p << r.p; @@ coccilib.org.print_todo(p[0], "WARNING opportunity for memdup_user") @script:python depends on report@ p << r.p; @@ coccilib.report.print_report(p[0], "WARNING opportunity for memdup_user")