Hi,
Please find the latest report on new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.
** CID 506142: Memory - corruptions (OVERRUN)
_____________________________________________________________________________________________
*** CID 506142: Memory - corruptions (OVERRUN)
/plat/rpi/rpi3/rpi3_bl1_mboot.c: 178 in bl1_plat_mboot_init()
172 tpm_alg_query_t alg_query[] = {
173 { .alg_id = TPM_ALG_SHA256 },
174 { .alg_id = EVLOG_TPM_ALG_SHA384 },
175 { .alg_id = EVLOG_TPM_ALG_SHA512 },
176 { .alg_id = TPM_ALG_NULL },
177 };
>>> CID 506142: Memory - corruptions (OVERRUN)
>>> Overrunning array "alg_query" of 4 4-byte elements by passing it to a function which accesses it at element index 63 (byte offset 255).
178 rc = tpm_getcap_query_algs(&tpm_chip_data, alg_query);
179 if (rc < 0) {
180 ERROR("Failed to query TPM algs (%d).\n", rc);
181 panic();
182 }
183
Best regards,
The Coverity Scan Admin Team
