Re: uvcvideo: shift exponent -7 is negative

From: Stephen Boyd
Date: Wed Apr 15 2020 - 15:34:01 EST


Quoting Randy Dunlap (2020-03-29 15:43:28)
> This is kernel version 5.6-rc6.
>
> UBSAN detected a bad shift value:
>
> [ 511.693411] UBSAN: Undefined behaviour in ../drivers/media/usb/uvc/uvc_ctrl.c:781:13
> [ 511.694043] shift exponent -7 is negative

I saw a similar problem. This patch fixed it for me but I'm not sure if
it's correct. The negative shift is done on the mask but we're going to
break out of the loop in that case so it isn't going to be used. Maybe
the loop should be a do while instead and then the mask can be
calculated at the start?

---8<----
diff --git a/drivers/media/usb/uvc/uvc_ctrl.c b/drivers/media/usb/uvc/uvc_ctrl.c
index e399b9fad757..ea6eb68329f3 100644
--- a/drivers/media/usb/uvc/uvc_ctrl.c
+++ b/drivers/media/usb/uvc/uvc_ctrl.c
@@ -778,7 +778,8 @@ static s32 uvc_get_le_value(struct uvc_control_mapping *mapping,
value |= offset > 0 ? (byte >> offset) : (byte << (-offset));
bits -= 8 - (offset > 0 ? offset : 0);
offset -= 8;
- mask = (1 << bits) - 1;
+ if (bits > 0)
+ mask = (1 << bits) - 1;
}

/* Sign-extend the value if needed. */