Hi,

Please find the latest report on new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.

• New Defects Found: 1
• 1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
• Defects Shown: Showing 1 of 1 defect(s)

Defect Details

** CID 507537:       Memory - corruptions  (ARRAY_VS_SINGLETON)


_____________________________________________________________________________________________
*** CID 507537:         Memory - corruptions  (ARRAY_VS_SINGLETON)
/contrib/qcbor/src/qcbor_decode.c: 4297             in QCBORDecode_Private_ExitBoundedMapOrArray()
4291         that is being exited. If there is no cached value,
4292         from previous map search, then do a dummy search.
4293         */
4294        if(pMe->uMapEndOffsetCache == QCBOR_MAP_OFFSET_CACHE_INVALID) {
4295           QCBORItem Dummy;
4296           Dummy.uLabelType = QCBOR_TYPE_NONE;
>>>     CID 507537:         Memory - corruptions  (ARRAY_VS_SINGLETON)
>>>     Passing "&Dummy" to function "QCBORDecode_Private_MapSearch" which uses it as an array. This might corrupt or misinterpret adjacent memory locations.
4297           uErr = QCBORDecode_Private_MapSearch(pMe, &Dummy, NULL, NULL);
4298           if(uErr != QCBOR_SUCCESS) {
4299              goto Done;
4300           }
4301        }
4302     

  

View Defects in Coverity Scan

Best regards,

The Coverity Scan Admin Team