[coreboot] New Defects reported by Coverity Scan for coreboot
scan-admin at coverity.com
scan-admin at coverity.com
Fri Jun 30 14:23:19 CEST 2017
Hi,
Please find the latest report on new defect(s) introduced to coreboot found with Coverity Scan.
31 new defect(s) introduced to coreboot found with Coverity Scan.
24 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 20 of 31 defect(s)
** CID 1376829: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1376829: (OVERRUN)
/3rdparty/chromeec/power/intel_x86.c: 403 in common_intel_x86_handle_rsmrst()
397 {
398 /*
399 * Pass through RSMRST asynchronously, as PCH may not react
400 * immediately to power changes.
401 */
402 int rsmrst_in = gpio_get_level(GPIO_RSMRST_L_PGOOD);
>>> CID 1376829: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_RSMRST_L" in call to "gpio_get_level".
403 int rsmrst_out = gpio_get_level(GPIO_PCH_RSMRST_L);
404
405 /* Nothing to do. */
406 if (rsmrst_in == rsmrst_out)
407 return;
408
/3rdparty/chromeec/power/intel_x86.c: 426 in common_intel_x86_handle_rsmrst()
420 * and deasserting RSMRST to PCH.
421 */
422 if (rsmrst_in)
423 msleep(10);
424 #endif
425
>>> CID 1376829: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_RSMRST_L" in call to "gpio_set_level".
426 gpio_set_level(GPIO_PCH_RSMRST_L, rsmrst_in);
427
428 CPRINTS("Pass through GPIO_RSMRST_L_PGOOD: %d", rsmrst_in);
** CID 1353202: Memory - corruptions (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353202: Memory - corruptions (OVERRUN)
/3rdparty/chromeec/board/oak/board.c: 204 in board_extpower_buffer_to_soc()
198 * There is a level shift for AC_OK & LID_OPEN signal between AP & EC,
199 * disable it (drive high) when AP is off, otherwise enable it (drive low).
200 */
201 static void board_extpower_buffer_to_soc(void)
202 {
203 /* Drive high when AP is off (G3), else drive low */
>>> CID 1353202: Memory - corruptions (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_LEVEL_SHIFT_EN_L" in call to "gpio_set_level".
204 gpio_set_level(GPIO_LEVEL_SHIFT_EN_L,
205 chipset_in_state(CHIPSET_STATE_HARD_OFF) ? 1 : 0);
206 }
207
208 /* Initialize board. */
209 static void board_init(void)
** CID 1353187: Memory - corruptions (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353187: Memory - corruptions (OVERRUN)
/3rdparty/chromeec/board/glados/board.c: 265 in board_extpower()
259
260 /**
261 * Buffer the AC present GPIO to the PCH.
262 */
263 static void board_extpower(void)
264 {
>>> CID 1353187: Memory - corruptions (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_ACOK" in call to "gpio_set_level".
265 gpio_set_level(GPIO_PCH_ACOK, extpower_is_present());
266 }
267 DECLARE_HOOK(HOOK_AC_CHANGE, board_extpower, HOOK_PRIO_DEFAULT);
268
269 /**
270 * Set active charge port -- only one port can be active at a time.
** CID 1353185: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353185: (OVERRUN)
/3rdparty/chromeec/board/chell/board.c: 389 in board_chipset_startup()
383 }
384 }
385
386 /* Called on AP S5 -> S3 transition */
387 static void board_chipset_startup(void)
388 {
>>> CID 1353185: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_USB1_ENABLE" in call to "gpio_set_level".
389 gpio_set_level(GPIO_USB1_ENABLE, 1);
390 gpio_set_level(GPIO_ENABLE_TOUCHPAD, 1);
391 }
392 DECLARE_HOOK(HOOK_CHIPSET_STARTUP, board_chipset_startup, HOOK_PRIO_DEFAULT);
393
394 /* Called on AP S3 -> S5 transition */
/3rdparty/chromeec/board/chell/board.c: 390 in board_chipset_startup()
384 }
385
386 /* Called on AP S5 -> S3 transition */
387 static void board_chipset_startup(void)
388 {
389 gpio_set_level(GPIO_USB1_ENABLE, 1);
>>> CID 1353185: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_ENABLE_TOUCHPAD" in call to "gpio_set_level".
390 gpio_set_level(GPIO_ENABLE_TOUCHPAD, 1);
391 }
392 DECLARE_HOOK(HOOK_CHIPSET_STARTUP, board_chipset_startup, HOOK_PRIO_DEFAULT);
393
394 /* Called on AP S3 -> S5 transition */
395 static void board_chipset_shutdown(void)
** CID 1353184: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353184: (OVERRUN)
/3rdparty/chromeec/board/oak/board.c: 605 in board_chipset_shutdown()
599 DECLARE_HOOK(HOOK_CHIPSET_PRE_INIT, board_chipset_pre_init, HOOK_PRIO_DEFAULT);
600
601 /* Called on AP S3 -> S5 transition */
602 static void board_chipset_shutdown(void)
603 {
604 /* Disable level shift to SoC when shutting down */
>>> CID 1353184: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_LEVEL_SHIFT_EN_L" in call to "gpio_set_level".
605 gpio_set_level(GPIO_LEVEL_SHIFT_EN_L, 1);
606 #if BOARD_REV >= OAK_REV5
607 /* Disable DP muxer */
608 gpio_set_level(GPIO_DP_MUX_EN_L , 1);
609 gpio_set_level(GPIO_PARADE_MUX_EN, 0);
610 #endif
/3rdparty/chromeec/board/oak/board.c: 608 in board_chipset_shutdown()
602 static void board_chipset_shutdown(void)
603 {
604 /* Disable level shift to SoC when shutting down */
605 gpio_set_level(GPIO_LEVEL_SHIFT_EN_L, 1);
606 #if BOARD_REV >= OAK_REV5
607 /* Disable DP muxer */
>>> CID 1353184: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_DP_MUX_EN_L" in call to "gpio_set_level".
608 gpio_set_level(GPIO_DP_MUX_EN_L , 1);
609 gpio_set_level(GPIO_PARADE_MUX_EN, 0);
610 #endif
611 }
612 DECLARE_HOOK(HOOK_CHIPSET_SHUTDOWN, board_chipset_shutdown, HOOK_PRIO_DEFAULT);
613
/3rdparty/chromeec/board/oak/board.c: 609 in board_chipset_shutdown()
603 {
604 /* Disable level shift to SoC when shutting down */
605 gpio_set_level(GPIO_LEVEL_SHIFT_EN_L, 1);
606 #if BOARD_REV >= OAK_REV5
607 /* Disable DP muxer */
608 gpio_set_level(GPIO_DP_MUX_EN_L , 1);
>>> CID 1353184: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PARADE_MUX_EN" in call to "gpio_set_level".
609 gpio_set_level(GPIO_PARADE_MUX_EN, 0);
610 #endif
611 }
612 DECLARE_HOOK(HOOK_CHIPSET_SHUTDOWN, board_chipset_shutdown, HOOK_PRIO_DEFAULT);
613
614
/3rdparty/chromeec/board/chell/board.c: 397 in board_chipset_shutdown()
391 }
392 DECLARE_HOOK(HOOK_CHIPSET_STARTUP, board_chipset_startup, HOOK_PRIO_DEFAULT);
393
394 /* Called on AP S3 -> S5 transition */
395 static void board_chipset_shutdown(void)
396 {
>>> CID 1353184: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_USB1_ENABLE" in call to "gpio_set_level".
397 gpio_set_level(GPIO_USB1_ENABLE, 0);
398 gpio_set_level(GPIO_ENABLE_TOUCHPAD, 0);
399 }
400 DECLARE_HOOK(HOOK_CHIPSET_SHUTDOWN, board_chipset_shutdown, HOOK_PRIO_DEFAULT);
401
402 /* Called on AP S3 -> S0 transition */
/3rdparty/chromeec/board/chell/board.c: 398 in board_chipset_shutdown()
392 DECLARE_HOOK(HOOK_CHIPSET_STARTUP, board_chipset_startup, HOOK_PRIO_DEFAULT);
393
394 /* Called on AP S3 -> S5 transition */
395 static void board_chipset_shutdown(void)
396 {
397 gpio_set_level(GPIO_USB1_ENABLE, 0);
>>> CID 1353184: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_ENABLE_TOUCHPAD" in call to "gpio_set_level".
398 gpio_set_level(GPIO_ENABLE_TOUCHPAD, 0);
399 }
400 DECLARE_HOOK(HOOK_CHIPSET_SHUTDOWN, board_chipset_shutdown, HOOK_PRIO_DEFAULT);
401
402 /* Called on AP S3 -> S0 transition */
403 static void board_chipset_resume(void)
** CID 1353182: Memory - corruptions (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353182: Memory - corruptions (OVERRUN)
/3rdparty/chromeec/board/chell/usb_pd_policy.c: 297 in svdm_dp_post_config()
291 static void svdm_dp_post_config(int port)
292 {
293 dp_flags[port] |= DP_FLAGS_DP_ON;
294 if (!(dp_flags[port] & DP_FLAGS_HPD_HI_PENDING))
295 return;
296
>>> CID 1353182: Memory - corruptions (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "port ? GPIO_USB_C1_DP_HPD : GPIO_USB_C0_DP_HPD" (which evaluates to 53) in call to "gpio_set_level".
297 gpio_set_level(PORT_TO_HPD(port), 1);
298
299 /* set the minimum time delay (2ms) for the next HPD IRQ */
300 hpd_deadline[port] = get_time().val + HPD_USTREAM_DEBOUNCE_LVL;
301 }
302
** CID 1376828: Uninitialized variables (UNINIT)
/3rdparty/chromeec/util/genvif.c: 296 in write_pdo_to_vif()
________________________________________________________________________________________________________
*** CID 1376828: Uninitialized variables (UNINIT)
/3rdparty/chromeec/util/genvif.c: 296 in write_pdo_to_vif()
290 pnum, current);
291 else
292 fprintf(vif, "Snk_PDO_Op_Current%d: %d\r\n",
293 pnum, current);
294 }
295
>>> CID 1376828: Uninitialized variables (UNINIT)
>>> Using uninitialized value "power".
296 return power;
297 }
298
299 /**
300 * Carriage and line feed, '\r\n', is needed because the file is processed
301 * on a Windows machine.
** CID 1376827: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1376827: (OVERRUN)
/3rdparty/chromeec/board/oak/board.c: 595 in board_chipset_pre_init()
589 static void board_chipset_pre_init(void)
590 {
591 /* Enable level shift of AC_OK when power on */
592 board_extpower_buffer_to_soc();
593 #if BOARD_REV >= OAK_REV5
594 /* Enable DP muxer */
>>> CID 1376827: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_DP_MUX_EN_L" in call to "gpio_set_level".
595 gpio_set_level(GPIO_DP_MUX_EN_L , 0);
596 gpio_set_level(GPIO_PARADE_MUX_EN, 1);
597 #endif
598 }
599 DECLARE_HOOK(HOOK_CHIPSET_PRE_INIT, board_chipset_pre_init, HOOK_PRIO_DEFAULT);
600
/3rdparty/chromeec/board/oak/board.c: 596 in board_chipset_pre_init()
590 {
591 /* Enable level shift of AC_OK when power on */
592 board_extpower_buffer_to_soc();
593 #if BOARD_REV >= OAK_REV5
594 /* Enable DP muxer */
595 gpio_set_level(GPIO_DP_MUX_EN_L , 0);
>>> CID 1376827: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PARADE_MUX_EN" in call to "gpio_set_level".
596 gpio_set_level(GPIO_PARADE_MUX_EN, 1);
597 #endif
598 }
599 DECLARE_HOOK(HOOK_CHIPSET_PRE_INIT, board_chipset_pre_init, HOOK_PRIO_DEFAULT);
600
601 /* Called on AP S3 -> S5 transition */
** CID 1376826: Memory - illegal accesses (UNINIT)
/3rdparty/chromeec/util/genvif.c: 528 in main()
________________________________________________________________________________________________________
*** CID 1376826: Memory - illegal accesses (UNINIT)
/3rdparty/chromeec/util/genvif.c: 528 in main()
522
523 default:
524 abort();
525 }
526 } while (nopt != -1);
527
>>> CID 1376826: Memory - illegal accesses (UNINIT)
>>> Using uninitialized value "board".
528 if (out == NULL || board == NULL)
529 return 1;
530
531 /* Make sure VIF directory exists */
532 vifdir = opendir(out);
533 if (vifdir == NULL) {
** CID 1376825: Control flow issues (DEADCODE)
/3rdparty/chromeec/driver/tcpm/tcpci.c: 390 in tcpci_get_chip_info()
________________________________________________________________________________________________________
*** CID 1376825: Control flow issues (DEADCODE)
/3rdparty/chromeec/driver/tcpm/tcpci.c: 390 in tcpci_get_chip_info()
384 /* Even if the chip doesn't implement get_fw_version, we
385 * return success.*/
386 val = -1;
387 error = EC_SUCCESS;
388 }
389 if (error)
>>> CID 1376825: Control flow issues (DEADCODE)
>>> Execution cannot reach this statement: "return error;".
390 return error;
391 /* This may vary chip to chip. For now everything fits in this format */
392 i->fw_version_number = val;
393
394 return EC_SUCCESS;
395 }
** CID 1376824: Memory - illegal accesses (UNINIT)
/3rdparty/chromeec/util/genvif.c: 528 in main()
________________________________________________________________________________________________________
*** CID 1376824: Memory - illegal accesses (UNINIT)
/3rdparty/chromeec/util/genvif.c: 528 in main()
522
523 default:
524 abort();
525 }
526 } while (nopt != -1);
527
>>> CID 1376824: Memory - illegal accesses (UNINIT)
>>> Using uninitialized value "out".
528 if (out == NULL || board == NULL)
529 return 1;
530
531 /* Make sure VIF directory exists */
532 vifdir = opendir(out);
533 if (vifdir == NULL) {
** CID 1353302: Memory - illegal accesses (OVERRUN)
/3rdparty/chromeec/chip/stm32/keyboard_raw.c: 66 in keyboard_raw_drive_column()
________________________________________________________________________________________________________
*** CID 1353302: Memory - illegal accesses (OVERRUN)
/3rdparty/chromeec/chip/stm32/keyboard_raw.c: 66 in keyboard_raw_drive_column()
60
61 for (i = 0; i < ARRAY_SIZE(kb_out_ports); i++) {
62 uint32_t bsrr = 0;
63 int j;
64
65 for (j = GPIO_KB_OUT00; j <= GPIO_KB_OUT12; j++) {
>>> CID 1353302: Memory - illegal accesses (OVERRUN)
>>> Overrunning array "gpio_list" of 44 16-byte elements at element index 47 (byte offset 752) using index "j" (which evaluates to 47).
66 if (gpio_list[j].port != kb_out_ports[i])
67 continue;
68
69 if (out == KEYBOARD_COLUMN_ALL) {
70 /* drive low (clear bit) */
71 bsrr |= gpio_list[j].mask << 16;
** CID 1353276: Memory - corruptions (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353276: Memory - corruptions (OVERRUN)
/3rdparty/chromeec/board/chell/usb_pd_policy.c: 348 in svdm_exit_dp_mode()
342 return 1;
343 }
344
345 static void svdm_exit_dp_mode(int port)
346 {
347 svdm_safe_dp_mode(port);
>>> CID 1353276: Memory - corruptions (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "port ? GPIO_USB_C1_DP_HPD : GPIO_USB_C0_DP_HPD" (which evaluates to 53) in call to "gpio_set_level".
348 gpio_set_level(PORT_TO_HPD(port), 0);
349 }
350
351 static int svdm_enter_gfu_mode(int port, uint32_t mode_caps)
352 {
353 /* Always enter GFU mode */
** CID 1353275: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353275: (OVERRUN)
/3rdparty/chromeec/board/samus/power_sequence.c: 108 in chipset_reset_rtc()
102 {
103 /*
104 * Assert RTCRST# to the PCH long enough for it to latch the
105 * assertion and reset the internal RTC backed state.
106 */
107 CPRINTS("Asserting RTCRST# to PCH");
>>> CID 1353275: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_RTCRST_L" in call to "gpio_set_level".
108 gpio_set_level(GPIO_PCH_RTCRST_L, 0);
109 udelay(100);
110 gpio_set_level(GPIO_PCH_RTCRST_L, 1);
111 udelay(10 * MSEC);
112 }
113
/3rdparty/chromeec/board/samus/power_sequence.c: 110 in chipset_reset_rtc()
104 * Assert RTCRST# to the PCH long enough for it to latch the
105 * assertion and reset the internal RTC backed state.
106 */
107 CPRINTS("Asserting RTCRST# to PCH");
108 gpio_set_level(GPIO_PCH_RTCRST_L, 0);
109 udelay(100);
>>> CID 1353275: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_RTCRST_L" in call to "gpio_set_level".
110 gpio_set_level(GPIO_PCH_RTCRST_L, 1);
111 udelay(10 * MSEC);
112 }
113
114 void chipset_reset(int cold_reset)
115 {
** CID 1353274: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353274: (OVERRUN)
/3rdparty/chromeec/board/samus/power_sequence.c: 564 in lb_power()
558 */
559 if (enabled) {
560 i2c_lock(I2C_PORT_LIGHTBAR, 1);
561 msleep(10);
562 }
563
>>> CID 1353274: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_LIGHTBAR_RESET_L" in call to "gpio_get_level".
564 if (enabled != gpio_get_level(GPIO_LIGHTBAR_RESET_L)) {
565 ret = 1;
566 gpio_set_level(GPIO_LIGHTBAR_RESET_L, enabled);
567 msleep(1);
568 }
569 if (enabled) {
/3rdparty/chromeec/board/samus/power_sequence.c: 566 in lb_power()
560 i2c_lock(I2C_PORT_LIGHTBAR, 1);
561 msleep(10);
562 }
563
564 if (enabled != gpio_get_level(GPIO_LIGHTBAR_RESET_L)) {
565 ret = 1;
>>> CID 1353274: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_LIGHTBAR_RESET_L" in call to "gpio_set_level".
566 gpio_set_level(GPIO_LIGHTBAR_RESET_L, enabled);
567 msleep(1);
568 }
569 if (enabled) {
570 lb_init(0);
571 msleep(100);
** CID 1353262: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353262: (OVERRUN)
/3rdparty/chromeec/board/samus/power_sequence.c: 76 in chipset_force_shutdown()
70 CPRINTS("%s()", __func__);
71
72 /*
73 * Force off. This condition will reset once the state machine
74 * transitions to G3.
75 */
>>> CID 1353262: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_DPWROK" in call to "gpio_set_level".
76 gpio_set_level(GPIO_PCH_DPWROK, 0);
77 gpio_set_level(GPIO_PCH_RSMRST_L, 0);
78 }
79
80 static void chipset_force_g3(void)
81 {
/3rdparty/chromeec/board/samus/power_sequence.c: 77 in chipset_force_shutdown()
71
72 /*
73 * Force off. This condition will reset once the state machine
74 * transitions to G3.
75 */
76 gpio_set_level(GPIO_PCH_DPWROK, 0);
>>> CID 1353262: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_RSMRST_L" in call to "gpio_set_level".
77 gpio_set_level(GPIO_PCH_RSMRST_L, 0);
78 }
79
80 static void chipset_force_g3(void)
81 {
82 CPRINTS("Forcing G3");
/3rdparty/chromeec/power/braswell.c: 67 in chipset_force_shutdown()
61 * Force power off. This condition will reset once the state machine
62 * transitions to G3.
63 */
64 #ifndef CONFIG_PMIC
65 gpio_set_level(GPIO_PCH_SYS_PWROK, 0);
66 #endif
>>> CID 1353262: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_RSMRST_L" in call to "gpio_set_level".
67 gpio_set_level(GPIO_PCH_RSMRST_L, 0);
68 forcing_shutdown = 1;
69 }
70
71 void chipset_reset(int cold_reset)
72 {
** CID 1353259: (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353259: (OVERRUN)
/3rdparty/chromeec/board/samus/power_sequence.c: 85 in chipset_force_g3()
79
80 static void chipset_force_g3(void)
81 {
82 CPRINTS("Forcing G3");
83
84 gpio_disable_interrupt(GPIO_VCORE_PGOOD);
>>> CID 1353259: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_PWROK" in call to "gpio_set_level".
85 gpio_set_level(GPIO_PCH_PWROK, 0);
86 gpio_set_level(GPIO_SYS_PWROK, 0);
87 gpio_set_level(GPIO_PP1050_EN, 0);
88 gpio_set_level(GPIO_PP1200_EN, 0);
89 gpio_set_level(GPIO_PP1800_EN, 0);
90 gpio_set_level(GPIO_PP3300_DSW_GATED_EN, 0);
/3rdparty/chromeec/board/samus/power_sequence.c: 95 in chipset_force_g3()
89 gpio_set_level(GPIO_PP1800_EN, 0);
90 gpio_set_level(GPIO_PP3300_DSW_GATED_EN, 0);
91 gpio_set_level(GPIO_PP5000_USB_EN, 0);
92 /* Disable PP5000 if allowed */
93 if (!pp5000_in_g3)
94 gpio_set_level(GPIO_PP5000_EN, 0);
>>> CID 1353259: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_RSMRST_L" in call to "gpio_set_level".
95 gpio_set_level(GPIO_PCH_RSMRST_L, 0);
96 gpio_set_level(GPIO_PCH_DPWROK, 0);
97 gpio_set_level(GPIO_PP3300_DSW_EN, 0);
98 wireless_set_state(WIRELESS_OFF);
99 }
100
/3rdparty/chromeec/board/samus/power_sequence.c: 96 in chipset_force_g3()
90 gpio_set_level(GPIO_PP3300_DSW_GATED_EN, 0);
91 gpio_set_level(GPIO_PP5000_USB_EN, 0);
92 /* Disable PP5000 if allowed */
93 if (!pp5000_in_g3)
94 gpio_set_level(GPIO_PP5000_EN, 0);
95 gpio_set_level(GPIO_PCH_RSMRST_L, 0);
>>> CID 1353259: (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_DPWROK" in call to "gpio_set_level".
96 gpio_set_level(GPIO_PCH_DPWROK, 0);
97 gpio_set_level(GPIO_PP3300_DSW_EN, 0);
98 wireless_set_state(WIRELESS_OFF);
99 }
100
101 static void chipset_reset_rtc(void)
** CID 1353251: Memory - corruptions (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353251: Memory - corruptions (OVERRUN)
/3rdparty/chromeec/common/usb_port_power_smart.c: 41 in usb_charge_set_control_mode()
35 #ifdef CONFIG_USB_PORT_POWER_SMART_SIMPLE
36 /*
37 * One single shared control signal, so the last mode set to either
38 * port wins. Also, only CTL1 can be set; the other pins are
39 * hard-wired.
40 */
>>> CID 1353251: Memory - corruptions (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_USB_CTL1" in call to "gpio_set_level".
41 gpio_set_level(GPIO_USB_CTL1, mode & 0x4);
42 #else
43 if (port_id == 0) {
44 gpio_set_level(GPIO_USB1_CTL1, mode & 0x4);
45 gpio_set_level(GPIO_USB1_CTL2, mode & 0x2);
46 gpio_set_level(GPIO_USB1_CTL3, mode & 0x1);
** CID 1353242: Memory - corruptions (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353242: Memory - corruptions (OVERRUN)
/3rdparty/chromeec/power/tegra.c: 134 in set_ap_reset()
128 * @param asserted Assert (=1) or deassert (=0) the signal. This is the
129 * logical level of the pin, not the physical level.
130 */
131 static void set_ap_reset(int asserted)
132 {
133 /* Signal is active-low */
>>> CID 1353242: Memory - corruptions (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_AP_RESET_L" in call to "gpio_set_level".
134 gpio_set_level(GPIO_AP_RESET_L, asserted ? 0 : 1);
135 }
136
137 /**
138 * Set the PMIC PWRON signal.
139 *
** CID 1353226: Memory - corruptions (OVERRUN)
________________________________________________________________________________________________________
*** CID 1353226: Memory - corruptions (OVERRUN)
/3rdparty/chromeec/board/samus/extpower.c: 70 in extpower_shutdown()
64 }
65 DECLARE_HOOK(HOOK_CHIPSET_PRE_INIT, extpower_buffer_to_pch, HOOK_PRIO_DEFAULT);
66
67 static void extpower_shutdown(void)
68 {
69 /* Drive ACOK buffer to PCH low when shutting down */
>>> CID 1353226: Memory - corruptions (OVERRUN)
>>> Overrunning callee's array of size 44 by passing argument "GPIO_PCH_ACOK" in call to "gpio_set_level".
70 gpio_set_level(GPIO_PCH_ACOK, 0);
71 }
72 DECLARE_HOOK(HOOK_CHIPSET_SHUTDOWN, extpower_shutdown, HOOK_PRIO_DEFAULT);
73
74 void extpower_interrupt(enum gpio_signal signal)
75 {
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRbLuoVetFLSjdonCi1EjfHRqWGQvojmmkYaBE-2BPJiTQvQ-3D-3D_q4bX76XMySz3BXBlWr5fXXJ4cvAsgEXEqC7dBPM7O5ZX7aOhFm0Fy8rek-2BjmAdrCTFhPNT71QLaOB2Rvtl7LWwkF2nnXNxmXqv3-2FJPWMHvlOZIhKwHg6VpviLGt0yMNsQewguLfzPpeoaidht74oGQ90R3Ea50paF9Zx75bL3xlaWhHmN0ed7I3q3711DwZ8X5ZYkO5MPTVXXyAymbZks1OgAsVomc59-2BUb7RlkSjj0-3D
To manage Coverity Scan email notifications for "coreboot at coreboot.org", click https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRbVDbis712qZDP-2FA8y06Nq4e-2BpBzwOa5gzBZa9dWpDbzfofODnVj1enK2UkK0-2BgCCqyeem8IVKvTxSaOFkteZFcnohwvb2rnYNjswGryEWCURnUk6WHU42sbOmtOjD-2Bx5c-3D_q4bX76XMySz3BXBlWr5fXXJ4cvAsgEXEqC7dBPM7O5ZX7aOhFm0Fy8rek-2BjmAdrCo-2BYt1jo4dzNseaNK4wyfvtBf2sTD6bCUF2QakLpl4ZlJ0qCmQtIKPUrNX-2FyCciTiy6l-2BLN0hhCrqzbQEOHvBS4U-2F9nINxX51UXhnkn4TVcqTehw-2BQE4CTL-2Be51nrCjQ5nFA9Y353kNNuNZ-2BXj9luPOc6I4Qeht5Ohqo5DyrLqlg-3D
More information about the coreboot
mailing list