Fwd: New Defects reported by Coverity Scan for Das U-Boot

Raymond Mao raymondmaoca at gmail.com
Sat May 2 00:51:19 CEST 2026


Hi Michal,

On Wed, Apr 29, 2026 at 2:31 AM Michal Simek <michal.simek at amd.com> wrote:
>
>
>
> On 4/28/26 16:04, Tom Rini wrote:
> > Here's the latest report.
> >
> > ---------- Forwarded message ---------
> > From: <scan-admin at coverity.com>
> > Date: Mon, Apr 27, 2026, 5:41 PM
> > Subject: New Defects reported by Coverity Scan for Das U-Boot
> > To: <tom.rini at gmail.com>
> >
> >
> > Hi,
> >
> > Please find the latest report on new defect(s) introduced to *Das U-Boot*
> > found with Coverity Scan.
> >
> >     - *New Defects Found:* 9
> >     - 77 defect(s), reported by Coverity Scan earlier, were marked fixed in
> >     the recent build analyzed by Coverity Scan.
> >     - *Defects Shown:* Showing 9 of 9 defect(s)
> >
> > Defect Details
> >
> >
> > ** CID 645841:       Incorrect expression  (BAD_COMPARE)
> > /common/bloblist.c: 303           in bloblist_apply_blobs()
> >
> >
> > _____________________________________________________________________________________________
> > *** CID 645841:         Incorrect expression  (BAD_COMPARE)
> > /common/bloblist.c: 303             in bloblist_apply_blobs()
> > 297                                   log_err("Failed to apply blob with tag %d\n",
> > 298                                           tag);
> > 299                                   return ret;
> > 300                           }
> > 301
> > 302                           rec = rec_from_blob(blob - dat_off);
> >>>>      CID 645841:         Incorrect expression  (BAD_COMPARE)
> >>>>      Comparing pointer "rec" against "NULL" using anything besides "==" or "!=" is likely to be incorrect.
> > 303                           if (rec <= 0) {
> > 304                                   log_err("Blob corrupted\n");
> > 305                                   return -ENOENT;
> > 306                           }
> > 307
> > 308                           /* Mark applied blob record as void */
> >
>
> I sent a patch for this one.
>
>
> > ** CID 645839:       Error handling issues  (CHECKED_RETURN)
> > /lib/fdtdec.c: 1785           in fdtdec_apply_bloblist_dtos()
> >
> >
> > _____________________________________________________________________________________________
> > *** CID 645839:         Error handling issues  (CHECKED_RETURN)
> > /lib/fdtdec.c: 1785             in fdtdec_apply_bloblist_dtos()
> > 1779
> > 1780          ret = bloblist_apply_blobs(BLOBLISTT_FDT_OVERLAY,
> > fdtdec_apply_dto_blob);
> > 1781          if (ret)
> > 1782                  return ret;
> > 1783
> > 1784          /* Shink the blob to the actual FDT size */
> >>>>      CID 645839:         Error handling issues  (CHECKED_RETURN)
> >>>>      Calling "fdt_pack" without checking return value (as is done elsewhere 5 out of 6 times).
> > 1785          fdt_pack(live_fdt);
> > 1786          return bloblist_resize(BLOBLISTT_CONTROL_FDT,
> > fdt_totalsize(live_fdt));
> > 1787     }
> > 1788
> > 1789     int fdtdec_setup(void)
> > 1790     {
> >
>
> And this one.
>

Thanks for solving these two.

Raymond

> M


More information about the U-Boot mailing list