On 21/06/2023 12:22, Jason-JH.Lin wrote:
CERT-C Characters and Strings (CERT STR31-C) all_drm_priv[cnt] evaluates to an address that could be at negative offset of an array. In mtk_drm_get_all_drm_priv(): Guarantee that storage for strings has sufficient space for character data and the null terminator. So change cnt to unsigned int and check its max value.
Reviewed-by: Alexandre Mergnat <amergnat@xxxxxxxxxxxx> -- Regards, Alexandre
