From: Paolo Bonzini <pbonz...@redhat.com>
Replay data is not considered a possible attack vector; add a model that
does not use getc so that "tainted data" warnings are suppressed.
Signed-off-by: Paolo Bonzini <pbonz...@redhat.com>
Message-Id: <20180514141218.28438-1-pbonz...@redhat.com>
Reviewed-by: Markus Armbruster <arm...@redhat.com>
[Whitespace tweaked]
Signed-off-by: Markus Armbruster <arm...@redhat.com>
---
scripts/coverity-model.c | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/scripts/coverity-model.c b/scripts/coverity-model.c
index c702804f41..2ec753db05 100644
--- a/scripts/coverity-model.c
+++ b/scripts/coverity-model.c
@@ -103,6 +103,18 @@ static int get_keysym(const name2keysym_t *table,
}
}
+/* Replay data is considered trusted. */
+uint8_t replay_get_byte(void)
+{
+ uint8_t byte = 0;
+ if (replay_file) {
+ uint8_t c;
+ byte = c;
+ }
+ return byte;
+}
+
+
/*
* GLib memory allocation functions.
*
--
2.17.1
