Hey Paul,
Thanks for bringing this up. We'd definitely like to fix the issues that are identified by coverity.
To start looking at issues, sign up for a coverity account:
After you log in, search for the coreboot project and click the 'Add me to project' button. You should be able to see the project and issues as soon as this is done. I believe someone needs to approve your member request before you can update any of the issues.
We had a bad run last night, so it didn't analyze the full coreboot tree. We're limited to running the scan twice a week, so we'll try again tomorrow. I don't see a way to view the defects that were removed because of this, so we'll want to wait a day or two to start digging into issues.
We're looking at setting this up as an automated weekly test run.
Martin