Alessandro Nardin created an issue:
https://gitlab.rtems.org/rtems/rtos/rtems/-/issues/5131
## Summary
Coverity CID 1512510
Incorrect values could be read from an arbitrary memory location, causing
incorrect computations.
In rtems_aio_search_fd: Reads an uninitialized pointer or its target
```
298 } else {
>>> 11. alloc_fn: Calling malloc which returns uninitialized memory.
>>> 12. assign: Assigning: r_chain = malloc(128U), which points to
>>> uninitialized data.
299 r_chain = malloc( sizeof( rtems_aio_request_chain ) );
300 rtems_chain_initialize_empty( &r_chain->perfd );
301 rtems_chain_initialize_node( &r_chain->next_fd );
302
>>> 13. Condition rtems_chain_is_empty(chain), taking true branch.
303 if ( rtems_chain_is_empty( chain ) )
>>> CID 1512510: (#1 of 1): Uninitialized pointer read (UNINIT)
>>> 14. uninit_use_in_call: Using uninitialized value r_chain->next_fd.next
>>> when calling rtems_chain_prepend.[show details]
304 rtems_chain_prepend( chain, &r_chain->next_fd );
305 else
306 rtems_chain_insert( rtems_chain_previous( node ), &r_chain->next_fd
);
```
--
View it on GitLab: https://gitlab.rtems.org/rtems/rtos/rtems/-/issues/5131
You're receiving this email because of your account on gitlab.rtems.org.
_______________________________________________
bugs mailing list
[email protected]
http://lists.rtems.org/mailman/listinfo/bugs
