Invalid dereferences in some LDV tasks
-
task
ldv-validator-v0.8/linux-stable-42f9f8d-1-111_1a-sound--oss--opl3.ko-entry_point_ldv-val-v0.8.cil.out.i
has invalid dereference on line 4836 becauseme___0
can have any value but the arraysynth_devs
has only 11 elements. -
task
ldv-validator-v0.8/linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point_ldv-val-v0.8.cil.out.i
allocates 1736 bytes to pointersi4713_subdev_core_ops_group2
on line 6122 and passes this memory to the call ofsi4713_g_ext_ctrls
on line 6315. There the memory is casted to a bigger structsi4713_device
on line 5549 and the allocated memory is then accessed with offset 2596 on line 5672. -
task
ldv-commit-tester/m0_drivers-media-radio-si4713-i2c-ko--111_1a--064368f-1.i
: ifldv_malloc
returns 0 on line 6032, then 0 is passed as the first argument tosi4713_probe
on line 6088 where it is dereferenced on line 5853.