The following issues were found
sound/usb/6fire/midi.c
1 issues
Line: 186
Column: 2
CWE codes:
120
Suggestion:
Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused)
return ret;
}
rt->instance->private_data = rt;
strcpy(rt->instance->name, "DMX6FireUSB MIDI");
rt->instance->info_flags = SNDRV_RAWMIDI_INFO_OUTPUT |
SNDRV_RAWMIDI_INFO_INPUT |
SNDRV_RAWMIDI_INFO_DUPLEX;
snd_rawmidi_set_ops(rt->instance, SNDRV_RAWMIDI_STREAM_OUTPUT,
&out_ops);
Reported by FlawFinder.
security/apparmor/file.c
1 issues
Line: 48
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
{
struct common_audit_data *sa = va;
kuid_t fsuid = current_fsuid();
char str[10];
if (aad(sa)->request & AA_AUDIT_FILE_MASK) {
aa_perm_mask_to_str(str, sizeof(str), aa_file_perm_chrs,
map_mask_to_chr_mask(aad(sa)->request));
audit_log_format(ab, " requested_mask=\"%s\"", str);
Reported by FlawFinder.
sound/aoa/soundbus/i2sbus/i2sbus.h
1 issues
Line: 67
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
struct resource resources[3];
struct resource *allocated_resource[3];
int interrupts[3];
char rnames[3][32];
/* info about currently active substreams */
struct pcm_info out, in;
snd_pcm_format_t format;
unsigned int rate;
Reported by FlawFinder.
net/sched/sch_generic.c
1 issues
Line: 782
Column: 2
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
{
struct tc_prio_qopt opt = { .bands = PFIFO_FAST_BANDS };
memcpy(&opt.priomap, prio2band, TC_PRIO_MAX + 1);
if (nla_put(skb, TCA_OPTIONS, sizeof(opt), &opt))
goto nla_put_failure;
return skb->len;
nla_put_failure:
Reported by FlawFinder.
sound/aoa/fabrics/layout.c
1 issues
Line: 773
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
struct codec_connect_info *cci)
{
const u32 *ref;
char propname[32];
struct codec_connection *cc;
/* if the codec has a 'codec' node, we require a reference */
if (of_node_name_eq(codec->node, "codec")) {
snprintf(propname, sizeof(propname),
Reported by FlawFinder.
sound/synth/emux/emux_hwdep.c
1 issues
Line: 123
Column: 2
CWE codes:
120
Suggestion:
Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused)
if (err < 0)
return err;
emu->hwdep = hw;
strcpy(hw->name, SNDRV_EMUX_HWDEP_NAME);
hw->iface = SNDRV_HWDEP_IFACE_EMUX_WAVETABLE;
hw->ops.ioctl = snd_emux_hwdep_ioctl;
/* The ioctl parameter types are compatible between 32- and
* 64-bit architectures, so use the same function. */
hw->ops.ioctl_compat = snd_emux_hwdep_ioctl;
Reported by FlawFinder.
sound/aoa/codecs/tas.c
1 issues
Line: 118
Column: 11
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
static void tas3004_set_drc(struct tas *tas)
{
unsigned char val[6];
if (tas->drc_enabled)
val[0] = 0x50; /* 3:1 above threshold */
else
val[0] = 0x51; /* disabled */
Reported by FlawFinder.
security/keys/trusted-keys/trusted_tee.c
1 issues
Line: 246
Column: 2
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
if (IS_ERR(pvt_data.ctx))
return -ENODEV;
memcpy(sess_arg.uuid, rng_device->id.uuid.b, TEE_IOCTL_UUID_LEN);
sess_arg.clnt_login = TEE_IOCTL_LOGIN_REE_KERNEL;
sess_arg.num_params = 0;
ret = tee_client_open_session(pvt_data.ctx, &sess_arg, NULL);
if ((ret < 0) || (sess_arg.ret != 0)) {
Reported by FlawFinder.
sound/soc/intel/boards/skl_hda_dsp_generic.c
1 issues
Line: 109
Column: 8
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
.late_probe = skl_hda_card_late_probe,
};
static char hda_soc_components[30];
#define IDISP_DAI_COUNT 3
#define HDAC_DAI_COUNT 2
#define DMIC_DAI_COUNT 2
Reported by FlawFinder.
sound/aoa/codecs/onyx.c
1 issues
Line: 585
Column: 3
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
u8 regs[sizeof(initial_values)];
if (!onyx->initialised) {
memcpy(regs, initial_values, sizeof(initial_values));
if (onyx_read_register(onyx, ONYX_REG_CONTROL, &val))
return -1;
val &= ~ONYX_SILICONVERSION;
val |= initial_values[3];
regs[3] = val;
Reported by FlawFinder.