Hi,
Please find the latest report on new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.
1 new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan. 1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan Showing 1 of 1 defect(s)
** CID 507537: Memory - corruptions (ARRAY_VS_SINGLETON)
_____________________________________________________________________________________________ *** CID 507537: Memory - corruptions (ARRAY_VS_SINGLETON) /contrib/qcbor/src/qcbor_decode.c: 4297 in QCBORDecode_Private_ExitBoundedMapOrArray() 4291 that is being exited. If there is no cached value, 4292 from previous map search, then do a dummy search. 4293 */ 4294 if(pMe->uMapEndOffsetCache == QCBOR_MAP_OFFSET_CACHE_INVALID) { 4295 QCBORItem Dummy; 4296 Dummy.uLabelType = QCBOR_TYPE_NONE;
CID 507537: Memory - corruptions (ARRAY_VS_SINGLETON) Passing "&Dummy" to function "QCBORDecode_Private_MapSearch" which uses it as an array. This might corrupt or misinterpret adjacent memory locations.
4297 uErr = QCBORDecode_Private_MapSearch(pMe, &Dummy, NULL, NULL); 4298 if(uErr != QCBOR_SUCCESS) { 4299 goto Done; 4300 } 4301 } 4302
________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/arm-software-arm-trusted-firmware?tab=ove...