New Defects reported by Coverity Scan for ARM-software/arm-trusted-firmware - TF-A

2 Apr 2020


      Hi,
Please find the latest report on new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.
1 new defect(s) introduced to ARM-software/arm-trusted-firmware found with Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 355446:    (SIZEOF_MISMATCH)
/mbedtls/library/x509_crt.c: 1713 in x509_get_other_name()
/mbedtls/library/x509_crt.c: 1691 in x509_get_other_name()
/mbedtls/library/x509_crt.c: 1728 in x509_get_other_name()
________________________________________________________________________________________________________
*** CID 355446:    (SIZEOF_MISMATCH)
/mbedtls/library/x509_crt.c: 1713 in x509_get_other_name()
1707         other_name->value.hardware_module_name.oid.tag = MBEDTLS_ASN1_OID;
1708         other_name->value.hardware_module_name.oid.p = p;
1709         other_name->value.hardware_module_name.oid.len = len;
1710     
1711         if( p + len >= end )
1712         {
...
...
...
CID 355446:    (SIZEOF_MISMATCH)
Passing argument "other_name" of type "mbedtls_x509_san_other_name *" and argument "8UL /* sizeof (other_name) */" to function "mbedtls_platform_zeroize" is suspicious.

1713             mbedtls_platform_zeroize( other_name, sizeof( other_name ) );
1714             return( MBEDTLS_ERR_X509_INVALID_EXTENSIONS +
1715                     MBEDTLS_ERR_ASN1_LENGTH_MISMATCH );
1716         }
1717         p += len;
1718         if( ( ret = mbedtls_asn1_get_tag( &p, end, &len,
/mbedtls/library/x509_crt.c: 1691 in x509_get_other_name()
1685         {
1686             return( MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE );
1687         }
1688     
1689         if( p + len >= end )
1690         {
...
...
...
CID 355446:    (SIZEOF_MISMATCH)
Passing argument "other_name" of type "mbedtls_x509_san_other_name *" and argument "8UL /* sizeof (other_name) */" to function "mbedtls_platform_zeroize" is suspicious.

1691             mbedtls_platform_zeroize( other_name, sizeof( other_name ) );
1692             return( MBEDTLS_ERR_X509_INVALID_EXTENSIONS +
1693                     MBEDTLS_ERR_ASN1_LENGTH_MISMATCH );
1694         }
1695         p += len;
1696         if( ( ret = mbedtls_asn1_get_tag( &p, end, &len,
/mbedtls/library/x509_crt.c: 1728 in x509_get_other_name()
1722         other_name->value.hardware_module_name.val.tag = MBEDTLS_ASN1_OCTET_STRING;
1723         other_name->value.hardware_module_name.val.p = p;
1724         other_name->value.hardware_module_name.val.len = len;
1725         p += len;
1726         if( p != end )
1727         {
...
...
...
CID 355446:    (SIZEOF_MISMATCH)
Passing argument "other_name" of type "mbedtls_x509_san_other_name *" and argument "8UL /* sizeof (other_name) */" to function "mbedtls_platform_zeroize" is suspicious.

1728             mbedtls_platform_zeroize( other_name,
1729                                       sizeof( other_name ) );
1730             return( MBEDTLS_ERR_X509_INVALID_EXTENSIONS +
1731                     MBEDTLS_ERR_ASN1_LENGTH_MISMATCH );
1732         }
1733         return( 0 );
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u2389337.ct.sendgrid.net/ls/click?upn=nJaKvJSIH-2FPAfmty-2BK5tYpPklA...