Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Coverity CID: 487707] Overflowed return value in subsys/fs/ext2/ext2_impl.c #84711

Closed
zephyrbot opened this issue Jan 28, 2025 · 1 comment
Closed
Assignees
Labels
area: File System bug The issue is a bug, or the PR is fixing a bug Coverity A Coverity detected issue or its fix False positive Coverity identified issue that has been determined to be a false positive priority: medium Medium impact/importance bug

Comments

@zephyrbot
Copy link
Collaborator

Static code scan issues found in file:

https://github.com/zephyrproject-rtos/zephyr/tree/f0d0264c057255c60e91e422406f47a7b87d8a8a/subsys/fs/ext2/ext2_impl.c

Category: Insecure data handling
Function: ext2_init_storage
Component: File System
CID: 487707

Details:

return ret;

Please fix or provide comments in coverity using the link:

https://scan9.scan.coverity.com/#/project-view/29271/12996?selectedIssue=487707

For more information about the violation, check the Coverity Reference. (CWE-190)

Note: This issue was created automatically. Priority was set based on classification
of the file affected and the impact field in coverity. Assignees were set using the MAINTAINERS file.

@zephyrbot zephyrbot added area: File System bug The issue is a bug, or the PR is fixing a bug Coverity A Coverity detected issue or its fix priority: medium Medium impact/importance bug labels Jan 28, 2025
@de-nordic
Copy link
Collaborator

There is no issue here, as returned values are in-bound error codes and us such will not overflow the int.
Nothing to fix false positive.

I have posted PR that clarifies this here #84920, though I do not consider it fix, and not linking is here for that reason.

@de-nordic de-nordic added the False positive Coverity identified issue that has been determined to be a false positive label Jan 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: File System bug The issue is a bug, or the PR is fixing a bug Coverity A Coverity detected issue or its fix False positive Coverity identified issue that has been determined to be a false positive priority: medium Medium impact/importance bug
Projects
None yet
Development

No branches or pull requests

2 participants