The following issues were found
drivers/s390/char/sclp_tty.c
1 issues
Line: 51
Column: 17
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
static struct timer_list sclp_tty_timer;
static struct tty_port sclp_port;
static unsigned char sclp_tty_chars[SCLP_TTY_BUF_SIZE];
static unsigned short int sclp_tty_chars_count;
struct tty_driver *sclp_tty_driver;
static int sclp_tty_tolower;
Reported by FlawFinder.
drivers/ps3/ps3av_cmd.c
1 issues
Line: 620
Column: 2
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
static void ps3av_cnv_chstat(u8 *chstat, const u8 *cs_info)
{
memcpy(chstat, cs_info, 5);
}
u32 ps3av_cmd_set_av_audio_param(void *p, u32 port,
const struct ps3av_pkt_audio_mode *audio_mode,
u32 video_vid)
Reported by FlawFinder.
drivers/pps/clients/pps-ldisc.c
1 issues
Line: 110
Column: 35
CWE codes:
362
n_tty_inherit_ops(&pps_ldisc_ops);
/* Save N_TTY's open()/close() methods */
alias_n_tty_open = pps_ldisc_ops.open;
alias_n_tty_close = pps_ldisc_ops.close;
/* Init PPS_TTY data */
pps_ldisc_ops.owner = THIS_MODULE;
pps_ldisc_ops.num = N_PPS;
Reported by FlawFinder.
drivers/power/supply/wm8350_power.c
1 issues
Line: 179
Column: 9
CWE codes:
120
Suggestion:
Use sprintf_s, snprintf, or vsnprintf
return 0;
}
return sprintf(buf, "%s\n", charge);
}
static DEVICE_ATTR_RO(charger_state);
static irqreturn_t wm8350_charger_handler(int irq, void *data)
Reported by FlawFinder.
drivers/net/wireless/realtek/rtl818x/rtl8187/leds.c
1 issues
Line: 174
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
void rtl8187_leds_init(struct ieee80211_hw *dev, u16 custid)
{
struct rtl8187_priv *priv = dev->priv;
char name[RTL8187_LED_MAX_NAME_LEN + 1];
u8 ledpin;
int err;
/* According to the vendor driver, the LED operation depends on the
* customer ID encoded in the EEPROM
Reported by FlawFinder.
drivers/net/wireless/rayctl.h
1 issues
Line: 524
Column: 9
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
UCHAR link; /* link to next CCS, FF=end of list */
/* command specific parameters */
union {
char reserved[13];
struct update_param_cmd update_param;
struct report_param_cmd report_param;
UCHAR nummulticast;
UCHAR mode;
struct start_network_cmd start_network;
Reported by FlawFinder.
drivers/net/wireless/ralink/rt2x00/rt61pci.c
1 issues
Line: 361
Column: 3
CWE codes:
120
Suggestion:
Make sure destination can always hold the source data
sizeof(key_entry.rx_mic));
memset(&addr_entry, 0, sizeof(addr_entry));
memcpy(&addr_entry, crypto->address, ETH_ALEN);
addr_entry.cipher = crypto->cipher;
reg = PAIRWISE_KEY_ENTRY(key->hw_key_idx);
rt2x00mmio_register_multiwrite(rt2x00dev, reg,
&key_entry, sizeof(key_entry));
Reported by FlawFinder.
drivers/s390/char/tape_proc.c
1 issues
Line: 26
Column: 14
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
#include "tape.h"
static const char *tape_med_st_verbose[MS_SIZE] =
{
[MS_UNKNOWN] = "UNKNOWN ",
[MS_LOADED] = "LOADED ",
[MS_UNLOADED] = "UNLOADED"
};
Reported by FlawFinder.
drivers/net/wireless/ralink/rt2x00/rt2x00leds.c
1 issues
Line: 114
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
void rt2x00leds_register(struct rt2x00_dev *rt2x00dev)
{
char name[36];
int retval;
unsigned long on_period;
unsigned long off_period;
const char *phy_name = wiphy_name(rt2x00dev->hw->wiphy);
Reported by FlawFinder.
drivers/power/supply/wm831x_backup.c
1 issues
Line: 23
Column: 2
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
struct wm831x *wm831x;
struct power_supply *backup;
struct power_supply_desc backup_desc;
char name[20];
};
static int wm831x_backup_read_voltage(struct wm831x *wm831x,
enum wm831x_auxadc src,
union power_supply_propval *val)
Reported by FlawFinder.