Hi,

Please find the latest report on new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.

• New Defects Found: 1
• 2 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
• Defects Shown: Showing 1 of 1 defect(s)

Defect Details

** CID 506674:       Memory - corruptions  (OVERRUN)


_____________________________________________________________________________________________
*** CID 506674:         Memory - corruptions  (OVERRUN)
/plat/rpi/common/rpi_tpm.c: 152             in rpi_bl1_tpm_validate()
146     		{ .alg_id = EVLOG_TPM_ALG_SHA384 },
147     		{ .alg_id = EVLOG_TPM_ALG_SHA512 },
148     		{ .alg_id = TPM_ALG_NULL },
149     	};
150     	int rc;
151     
>>>     CID 506674:         Memory - corruptions  (OVERRUN)
>>>     Overrunning array "alg_query" of 4 4-byte elements by passing it to a function which accesses it at element index 63 (byte offset 255).
152     	rc = tpm_getcap_query_algs(&tpm_chip_data, alg_query);
153     	if (rc < 0) {
154     		ERROR("Failed to query TPM algs (%d).\n", rc);
155     		panic();
156     	}
157     

  

View Defects in Coverity Scan

Best regards,

The Coverity Scan Admin Team