Hi,

Please find the latest report on new defect(s) introduced to coreboot found 
with Coverity Scan.

2 new defect(s) introduced to coreboot found with Coverity Scan.


New defect(s) Reported-by: Coverity Scan
Showing 2 of 2 defect(s)


** CID 1435826:  Integer handling issues  (OVERFLOW_BEFORE_WIDEN)
/src/cpu/x86/mtrr/mtrr.c: 487 in calc_var_mtrr_range()


________________________________________________________________________________________________________
*** CID 1435826:  Integer handling issues  (OVERFLOW_BEFORE_WIDEN)
/src/cpu/x86/mtrr/mtrr.c: 487 in calc_var_mtrr_range()
481                     size_msb = fms64(size);
482     
483                     /* All MTRR entries need to have their base aligned to 
the mask
484                      * size. The maximum size is calculated by a function 
of the
485                      * min base bit set and maximum size bit set. */
486                     if (addr_lsb > size_msb)
>>>     CID 1435826:  Integer handling issues  (OVERFLOW_BEFORE_WIDEN)
>>>     Potentially overflowing expression "1 << size_msb" with type "int" (32 
>>> bits, signed) is evaluated using 32-bit arithmetic, and then used in a 
>>> context that expects an expression of type "uint64_t" (64 bits, unsigned).
487                             mtrr_size = 1 << size_msb;
488                     else
489                             mtrr_size = 1 << addr_lsb;
490     
491                     if (var_state->prepare_msrs)
492                             prep_var_mtrr(var_state, base, mtrr_size, 
mtrr_type);

** CID 1435825:  Integer handling issues  (OVERFLOW_BEFORE_WIDEN)
/src/cpu/x86/mtrr/mtrr.c: 489 in calc_var_mtrr_range()


________________________________________________________________________________________________________
*** CID 1435825:  Integer handling issues  (OVERFLOW_BEFORE_WIDEN)
/src/cpu/x86/mtrr/mtrr.c: 489 in calc_var_mtrr_range()
483                     /* All MTRR entries need to have their base aligned to 
the mask
484                      * size. The maximum size is calculated by a function 
of the
485                      * min base bit set and maximum size bit set. */
486                     if (addr_lsb > size_msb)
487                             mtrr_size = 1 << size_msb;
488                     else
>>>     CID 1435825:  Integer handling issues  (OVERFLOW_BEFORE_WIDEN)
>>>     Potentially overflowing expression "1 << addr_lsb" with type "int" (32 
>>> bits, signed) is evaluated using 32-bit arithmetic, and then used in a 
>>> context that expects an expression of type "uint64_t" (64 bits, unsigned).
489                             mtrr_size = 1 << addr_lsb;
490     
491                     if (var_state->prepare_msrs)
492                             prep_var_mtrr(var_state, base, mtrr_size, 
mtrr_type);
493     
494                     size -= mtrr_size;


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, 
https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yq2SfQfrHt3Prsn4qSLrYIrajINpiFX8l0vrlNSf8iCrS27qY0Cr0DkycwNUgGZJj8-3DJJ9w_L-2FDzr14mnrsJO5b1wX1hp9b1MAQygl7x-2B74RAaH2cn1YX5N6cWDwwMmHZEMkVeyzaIGWlVpKl9JmDSx8fErvZw1iKjPjKW-2BtXXuvuuqtla-2BMq9eYGMLAAHryDIhaYdYnwFJ-2ByY6TSOVWiZA5OQxbBIpjima8AP15-2BIiNUS97bi8WZVhNWDpzhxgf-2BSBMHV-2FXL2fMQSy1sY6-2FdTVjCZLlqItUZSFE4qjJjXx8-2Fcy8nus-3D
_______________________________________________
coreboot mailing list -- coreboot@coreboot.org
To unsubscribe send an email to coreboot-le...@coreboot.org

Reply via email to