Hi,
Please find the latest report on new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.
1 new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan. 2 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan Showing 1 of 1 defect(s)
** CID 506674: Memory - corruptions (OVERRUN)
_____________________________________________________________________________________________ *** CID 506674: Memory - corruptions (OVERRUN) /plat/rpi/common/rpi_tpm.c: 152 in rpi_bl1_tpm_validate() 146 { .alg_id = EVLOG_TPM_ALG_SHA384 }, 147 { .alg_id = EVLOG_TPM_ALG_SHA512 }, 148 { .alg_id = TPM_ALG_NULL }, 149 }; 150 int rc; 151
CID 506674: Memory - corruptions (OVERRUN) Overrunning array "alg_query" of 4 4-byte elements by passing it to a function which accesses it at element index 63 (byte offset 255).
152 rc = tpm_getcap_query_algs(&tpm_chip_data, alg_query); 153 if (rc < 0) { 154 ERROR("Failed to query TPM algs (%d).\n", rc); 155 panic(); 156 } 157
________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/arm-software-arm-trusted-firmware?tab=ove...