New Defects reported by Coverity Scan for ARM-software/arm-trusted-firmware - TF-A

10 Mar 2022


      Hi,
Please find the latest report on new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.
1 new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.
1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 376627:    (OVERRUN)
/plat/xilinx/zynqmp/pm_service/pm_svc_main.c: 276 in pm_smc_handler()
/plat/xilinx/zynqmp/pm_service/pm_svc_main.c: 553 in pm_smc_handler()
________________________________________________________________________________________________________
*** CID 376627:    (OVERRUN)
/plat/xilinx/zynqmp/pm_service/pm_svc_main.c: 276 in pm_smc_handler()
270     		SMC_RET1(handle, SMC_UNK);
271     
272     	pm_arg[0] = (uint32_t)x1;
273     	pm_arg[1] = (uint32_t)(x1 >> 32);
274     	pm_arg[2] = (uint32_t)x2;
275     	pm_arg[3] = (uint32_t)(x2 >> 32);
...
...
...
CID 376627:    (OVERRUN)
Overrunning array "pm_arg" of 4 4-byte elements at element index 4 (byte offset 19) using index "4".

276     	pm_arg[4] = (uint32_t)x3;
277     
278     	api_id = smc_fid & FUNCID_NUM_MASK;
279     
280     	switch (api_id) {
281     	/* PM API Functions */
/plat/xilinx/zynqmp/pm_service/pm_svc_main.c: 553 in pm_smc_handler()
547     		SMC_RET2(handle, (uint64_t)ret | ((uint64_t)version << 32),
548     			 (uint64_t)bit_mask[0] | ((uint64_t)bit_mask[1] << 32));
549     	}
550     
551     	default:
552     		/* Send request to the PMU */
...
...
...
CID 376627:    (OVERRUN)
Overrunning array "pm_arg" of 4 4-byte elements at element index 4 (byte offset 19) using index "4".

553     		PM_PACK_PAYLOAD6(payload, api_id, pm_arg[0], pm_arg[1],
554     				 pm_arg[2], pm_arg[3], pm_arg[4]);
555     		ret = pm_ipi_send_sync(primary_proc, payload, result,
556     				       PAYLOAD_ARG_CNT);
557     		SMC_RET2(handle, (uint64_t)ret | ((uint64_t)result[0] << 32),
558     			 (uint64_t)result[1] | ((uint64_t)result[2] << 32));
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0...