The following issues were found
drivers/scsi/initio.c
1 issues
Line: 2563
Column: 2
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
cblk->hastat = 0;
cblk->tastat = 0;
/* Command the command */
memcpy(cblk->cdb, cmnd->cmnd, cmnd->cmd_len);
/* Set up tags */
if (cmnd->device->tagged_supported) { /* Tag Support */
cblk->tagmsg = SIMPLE_QUEUE_TAG; /* Do simple tag only */
} else {
Reported by FlawFinder.
drivers/net/wireless/microchip/wilc1000/fw.h
1 issues
Line: 91
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
} __packed;
struct wilc_join_bss_param {
char ssid[IEEE80211_MAX_SSID_LEN];
u8 ssid_terminator;
u8 bss_type;
u8 ch;
__le16 cap_info;
u8 sa[ETH_ALEN];
Reported by FlawFinder.
drivers/net/wireless/mediatek/mt7601u/mac.c
1 issues
Line: 514
Column: 2
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
if (key->keylen > 32)
return MT_CIPHER_NONE;
memcpy(key_data, key->key, key->keylen);
switch (key->cipher) {
case WLAN_CIPHER_SUITE_WEP40:
return MT_CIPHER_WEP40;
case WLAN_CIPHER_SUITE_WEP104:
Reported by FlawFinder.
drivers/phy/freescale/phy-fsl-imx8-mipi-dphy.c
1 issues
Line: 331
Column: 2
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
return ret;
/* Update the configuration */
memcpy(&priv->cfg, &cfg, sizeof(struct mixel_dphy_cfg));
phy_write(phy, 0x00, DPHY_LOCK_BYP);
phy_write(phy, 0x01, priv->devdata->reg_tx_rcal);
phy_write(phy, 0x00, priv->devdata->reg_auto_pd_en);
phy_write(phy, 0x02, priv->devdata->reg_rxlprp);
Reported by FlawFinder.
drivers/net/wireless/mediatek/mt76/mt7921/eeprom.c
1 issues
Line: 94
Column: 2
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
return ret;
mt7921_eeprom_parse_hw_cap(dev);
memcpy(dev->mphy.macaddr, dev->mt76.eeprom.data + MT_EE_MAC_ADDR,
ETH_ALEN);
mt76_eeprom_override(&dev->mphy);
return 0;
Reported by FlawFinder.
drivers/phy/cadence/phy-cadence-torrent.c
1 issues
Line: 1710
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
struct clk_init_data *init;
const char *parent_name;
struct regmap *regmap;
char clk_name[100];
struct clk *clk;
int i;
derived_refclk = devm_kzalloc(dev, sizeof(*derived_refclk), GFP_KERNEL);
if (!derived_refclk)
Reported by FlawFinder.
drivers/phy/cadence/phy-cadence-sierra.c
1 issues
Line: 483
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
struct clk_init_data *init;
const char **parent_names;
unsigned int num_parents;
char clk_name[100];
struct clk *clk;
int i;
mux = devm_kzalloc(dev, sizeof(*mux), GFP_KERNEL);
if (!mux)
Reported by FlawFinder.
drivers/scsi/aacraid/aacraid.h
1 issues
Line: 1287
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
u8 ro;
u8 locked;
u8 deleted;
char devname[8];
struct sense_data sense_data;
u32 block_size;
u8 identifier[16];
};
Reported by FlawFinder.
drivers/scsi/ips.h
1 issues
Line: 1194
Column: 4
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
#define IPS_COMPAT_ID_LENGTH 8
#define IPS_DEFINE_COMPAT_TABLE(tablename) \
char tablename[IPS_COMPAT_MAX_ADAPTER_TYPE] [IPS_COMPAT_ID_LENGTH] = { \
IPS_COMPAT_UNKNOWN, \
IPS_COMPAT_SERVERAID1, \
IPS_COMPAT_SERVERAID2, \
IPS_COMPAT_NAVAJO, \
IPS_COMPAT_KIOWA, \
Reported by FlawFinder.
drivers/phy/broadcom/phy-brcm-usb-init.c
1 issues
Line: 97
Column: 14
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
#define USB_BRCM_FAMILY(chip) \
[BRCM_FAMILY_##chip] = __stringify(chip)
static const char *family_names[BRCM_FAMILY_COUNT] = {
USB_BRCM_FAMILY(3390A0),
USB_BRCM_FAMILY(7250B0),
USB_BRCM_FAMILY(7271A0),
USB_BRCM_FAMILY(7364A0),
USB_BRCM_FAMILY(7366C0),
Reported by FlawFinder.