From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: multipart/mixed; boundary="===============8880891029560657691==" MIME-Version: 1.0 From: kernel test robot Subject: Re: [PATCH 1/3] [v3] Kbuild: move to -std=gnu11 Date: Fri, 04 Mar 2022 16:24:06 +0800 Message-ID: <202203041613.3o0eiEg7-lkp@intel.com> List-Id: To: kbuild@lists.01.org --===============8880891029560657691== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable CC: llvm(a)lists.linux.dev CC: kbuild-all(a)lists.01.org BCC: lkp(a)intel.com In-Reply-To: <20220301145233.3689119-1-arnd@kernel.org> References: <20220301145233.3689119-1-arnd@kernel.org> TO: Arnd Bergmann TO: Masahiro Yamada CC: Arnd Bergmann CC: Marco Elver CC: Jani Nikula CC: David Sterba CC: Alex Shi CC: Nick Desaulniers CC: Miguel Ojeda CC: Mark Rutland CC: linux-kbuild(a)vger.kernel.org CC: llvm(a)lists.linux.dev CC: linux-doc(a)vger.kernel.org CC: linux-kernel(a)vger.kernel.org Hi Arnd, I love your patch! Perhaps something to improve: [auto build test WARNING on arm64/for-next/core] [also build test WARNING on masahiroy-kbuild/for-next drm-intel/for-linux-n= ext staging/staging-testing kdave/for-next soc/for-next linus/master v5.17-= rc6 next-20220303] [cannot apply to srcres258-doc/doc-zh-tw] [If your patch is applied to the wrong git tree, kindly drop us a note. And when submitting patch, we suggest to use '--base' as documented in https://git-scm.com/docs/git-format-patch] url: https://github.com/0day-ci/linux/commits/Arnd-Bergmann/Kbuild-move-= to-std-gnu11/20220301-225348 base: https://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for= -next/core :::::: branch date: 3 days ago :::::: commit date: 3 days ago config: arm-randconfig-c002-20220302 (https://download.01.org/0day-ci/archi= ve/20220304/202203041613.3o0eiEg7-lkp(a)intel.com/config) compiler: clang version 15.0.0 (https://github.com/llvm/llvm-project d271fc= 04d5b97b12e6b797c6067d3c96a8d7470e) reproduce (this is a W=3D1 build): wget https://raw.githubusercontent.com/intel/lkp-tests/master/sbin/= make.cross -O ~/bin/make.cross chmod +x ~/bin/make.cross # install arm cross compiling tool for clang build # apt-get install binutils-arm-linux-gnueabi # https://github.com/0day-ci/linux/commit/afebabb39f6a871f6e6d69f60= 1738fbce1c1b37c git remote add linux-review https://github.com/0day-ci/linux git fetch --no-tags linux-review Arnd-Bergmann/Kbuild-move-to-std-g= nu11/20220301-225348 git checkout afebabb39f6a871f6e6d69f601738fbce1c1b37c # save the config file to linux build tree COMPILER_INSTALL_PATH=3D$HOME/0day COMPILER=3Dclang make.cross ARCH= =3Darm clang-analyzer = If you fix the issue, kindly add following tag as appropriate Reported-by: kernel test robot clang-analyzer warnings: (new ones prefixed by >>) fs/hfsplus/bnode.c:92:3: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(kmap(*++pagep), buf, l); ^~~~~~ fs/hfsplus/bnode.c:115:2: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(kmap(*pagep) + off, 0, l); ^~~~~~ fs/hfsplus/bnode.c:115:2: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(kmap(*pagep) + off, 0, l); ^~~~~~ fs/hfsplus/bnode.c:121:3: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(kmap(*++pagep), 0, l); ^~~~~~ fs/hfsplus/bnode.c:121:3: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(kmap(*++pagep), 0, l); ^~~~~~ fs/hfsplus/bnode.c:145:3: warning: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(kmap(*dst_page) + src, kmap(*src_page) + src, l); ^~~~~~ fs/hfsplus/bnode.c:145:3: note: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 memcpy(kmap(*dst_page) + src, kmap(*src_page) + src, l); ^~~~~~ fs/hfsplus/bnode.c:152:4: warning: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(kmap(*++dst_page), kmap(*++src_page), l); ^~~~~~ fs/hfsplus/bnode.c:152:4: note: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 memcpy(kmap(*++dst_page), kmap(*++src_page), l); ^~~~~~ fs/hfsplus/bnode.c:173:4: warning: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dst_ptr, src_ptr, l); ^~~~~~ fs/hfsplus/bnode.c:173:4: note: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 memcpy(dst_ptr, src_ptr, l); ^~~~~~ fs/hfsplus/bnode.c:205:5: warning: Call to function 'memmove' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memmove_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(kmap(*dst_page), kmap(*src_page)= , src); ^~~~~~~ fs/hfsplus/bnode.c:205:5: note: Call to function 'memmove' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memmove_s' in case of C11 memmove(kmap(*dst_page), kmap(*src_page)= , src); ^~~~~~~ fs/hfsplus/bnode.c:215:4: warning: Call to function 'memmove' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memmove_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(kmap(*dst_page) + src, ^~~~~~~ fs/hfsplus/bnode.c:215:4: note: Call to function 'memmove' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memmove_s' in case of C11 memmove(kmap(*dst_page) + src, ^~~~~~~ fs/hfsplus/bnode.c:236:5: warning: Call to function 'memmove' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memmove_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(dst_ptr - l, src_ptr - l, l); ^~~~~~~ fs/hfsplus/bnode.c:236:5: note: Call to function 'memmove' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memmove_s' in case of C11 memmove(dst_ptr - l, src_ptr - l, l); ^~~~~~~ fs/hfsplus/bnode.c:254:4: warning: Call to function 'memmove' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memmove_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(kmap(*dst_page) + src, ^~~~~~~ fs/hfsplus/bnode.c:254:4: note: Call to function 'memmove' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memmove_s' in case of C11 memmove(kmap(*dst_page) + src, ^~~~~~~ fs/hfsplus/bnode.c:262:5: warning: Call to function 'memmove' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memmove_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(kmap(*++dst_page), ^~~~~~~ fs/hfsplus/bnode.c:262:5: note: Call to function 'memmove' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memmove_s' in case of C11 memmove(kmap(*++dst_page), ^~~~~~~ fs/hfsplus/bnode.c:285:5: warning: Call to function 'memmove' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memmove_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(dst_ptr, src_ptr, l); ^~~~~~~ fs/hfsplus/bnode.c:285:5: note: Call to function 'memmove' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memmove_s' in case of C11 memmove(dst_ptr, src_ptr, l); ^~~~~~~ fs/hfsplus/bnode.c:328:4: warning: Value stored to 'tmp' is never read [= clang-analyzer-deadcode.DeadStores] tmp =3D hfs_bnode_read_u16(node, key_off); ^ fs/hfsplus/bnode.c:328:4: note: Value stored to 'tmp' is never read fs/hfsplus/bnode.c:596:2: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(kmap(*pagep) + node->page_offset, 0, ^~~~~~ fs/hfsplus/bnode.c:596:2: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(kmap(*pagep) + node->page_offset, 0, ^~~~~~ fs/hfsplus/bnode.c:601:3: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(kmap(*++pagep), 0, PAGE_SIZE); ^~~~~~ fs/hfsplus/bnode.c:601:3: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(kmap(*++pagep), 0, PAGE_SIZE); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. fs/squashfs/symlink.c:84:4: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(pageaddr + length, 0, PAGE_SIZE - length); ^~~~~~ fs/squashfs/symlink.c:84:4: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(pageaddr + length, 0, PAGE_SIZE - length); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. >> fs/squashfs/file_direct.c:106:3: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(pageaddr + bytes, 0, PAGE_SIZE - bytes); ^~~~~~ fs/squashfs/file_direct.c:106:3: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(pageaddr + bytes, 0, PAGE_SIZE - bytes); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. fs/squashfs/xattr.c:66:5: warning: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, prefix, prefix_size); ^~~~~~ fs/squashfs/xattr.c:66:5: note: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 memcpy(buffer, prefix, prefix_size); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. fs/jfs/jfs_types.h:61:33: warning: The left operand of '&' is a garbage = value [clang-analyzer-core.UndefinedBinaryOperatorResult] pxd->len_addr =3D (pxd->len_addr & cpu_to_le32(~0xffffff)) | ^ fs/jfs/inode.c:211:6: note: Assuming 'create' is not equal to 0 if (create) ^~~~~~ fs/jfs/inode.c:211:2: note: Taking true branch if (create) ^ fs/jfs/inode.c:216:7: note: Assuming the condition is true if (((lblock64 << ip->i_sb->s_blocksize_bits) < ip->i_size) && ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/jfs/inode.c:216:6: note: Left side of '&&' is true if (((lblock64 << ip->i_sb->s_blocksize_bits) < ip->i_size) && ^ fs/jfs/inode.c:217:7: note: Assuming the condition is true (!xtLookup(ip, lblock64, xlen, &xflag, &xaddr, &xlen, 0)) && ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/jfs/inode.c:216:6: note: Left side of '&&' is true if (((lblock64 << ip->i_sb->s_blocksize_bits) < ip->i_size) && ^ fs/jfs/inode.c:218:6: note: Assuming 'xaddr' is not equal to 0 xaddr) { ^~~~~ fs/jfs/inode.c:216:2: note: Taking true branch if (((lblock64 << ip->i_sb->s_blocksize_bits) < ip->i_size) && ^ fs/jfs/inode.c:219:7: note: Assuming the condition is true if (xflag & XAD_NOTRECORDED) { ^~~~~~~~~~~~~~~~~~~~~~~ fs/jfs/inode.c:219:3: note: Taking true branch if (xflag & XAD_NOTRECORDED) { ^ fs/jfs/inode.c:220:9: note: 'create' is not equal to 0 if (!create) ^~~~~~ fs/jfs/inode.c:220:4: note: Taking false branch if (!create) ^ fs/jfs/inode.c:228:4: note: Calling 'PXDlength' XADlength(&xad, xlen); ^ fs/jfs/jfs_xtree.h:38:34: note: expanded from macro 'XADlength' #define XADlength(xad, length32) PXDlength(&(xad)->loc, length32) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/jfs/jfs_types.h:61:33: note: The left operand of '&' is a garbage val= ue pxd->len_addr =3D (pxd->len_addr & cpu_to_le32(~0xffffff)) | ~~~~~~~~~~~~~ ^ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. arch/arm/mach-s3c/pm-s3c24xx.c:68:6: warning: Value stored to 'irq' duri= ng its initialization is never read [clang-analyzer-deadcode.DeadStores] int irq =3D gpio_to_irq(pin); ^~~ arch/arm/mach-s3c/pm-s3c24xx.c:68:6: note: Value stored to 'irq' during = its initialization is never read int irq =3D gpio_to_irq(pin); ^~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 10 warnings generated. Suppressed 10 warnings (10 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 60 warnings generated. Suppressed 60 warnings (60 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 12 warnings generated. >> arch/arm/mach-s3c/simtec-audio.c:60:2: warning: Call to function 'snprin= tf' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'snprintf_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(our_name, sizeof(our_name)-1, "s3c24xx-simtec-%s", name= ); ^~~~~~~~ arch/arm/mach-s3c/simtec-audio.c:60:2: note: Call to function 'snprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'snprintf_s' in case of C11 snprintf(our_name, sizeof(our_name)-1, "s3c24xx-simtec-%s", name= ); ^~~~~~~~ Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. arch/arm/kernel/atags_compat.c:200:2: warning: Call to function 'strcpy'= is insecure as it does not provide bounding of the memory buffer. Replace = unbounded copy functions with analogous functions that support length argum= ents such as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(tag->u.cmdline.cmdline, params->commandline); ^~~~~~ arch/arm/kernel/atags_compat.c:200:2: note: Call to function 'strcpy' is= insecure as it does not provide bounding of the memory buffer. Replace unb= ounded copy functions with analogous functions that support length argument= s such as 'strlcpy'. CWE-119 strcpy(tag->u.cmdline.cmdline, params->commandline); ^~~~~~ >> arch/arm/kernel/atags_compat.c:206:2: warning: Call to function 'memmove= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memmove_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(params, taglist, ((int)tag) - ((int)taglist) + ^~~~~~~ arch/arm/kernel/atags_compat.c:206:2: note: Call to function 'memmove' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memmove_s' in case of C11 memmove(params, taglist, ((int)tag) - ((int)taglist) + ^~~~~~~ Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. Suppressed 33 warnings (32 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 13 warnings generated. Suppressed 13 warnings (10 in non-user code, 3 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 39 warnings generated. kernel/printk/printk.c:156:3: warning: Call to function 'strcpy' is inse= cure as it does not provide bounding of the memory buffer. Replace unbounde= d copy functions with analogous functions that support length arguments suc= h as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(devkmsg_log_str, "on"); ^~~~~~ kernel/printk/printk.c:156:3: note: Call to function 'strcpy' is insecur= e as it does not provide bounding of the memory buffer. Replace unbounded c= opy functions with analogous functions that support length arguments such a= s 'strlcpy'. CWE-119 strcpy(devkmsg_log_str, "on"); ^~~~~~ kernel/printk/printk.c:158:3: warning: Call to function 'strcpy' is inse= cure as it does not provide bounding of the memory buffer. Replace unbounde= d copy functions with analogous functions that support length arguments suc= h as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(devkmsg_log_str, "off"); ^~~~~~ kernel/printk/printk.c:158:3: note: Call to function 'strcpy' is insecur= e as it does not provide bounding of the memory buffer. Replace unbounded c= opy functions with analogous functions that support length arguments such a= s 'strlcpy'. CWE-119 strcpy(devkmsg_log_str, "off"); ^~~~~~ kernel/printk/printk.c:2399:3: warning: Call to function 'strncpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'strncpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(buf + 4, str, sizeof(buf) - 5); ^~~~~~~ kernel/printk/printk.c:2399:3: note: Call to function 'strncpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'strncpy_s' in case of C11 strncpy(buf + 4, str, sizeof(buf) - 5); ^~~~~~~ kernel/printk/printk.c:2401:3: warning: Call to function 'strncpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'strncpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(buf, str, sizeof(buf) - 1); ^~~~~~~ kernel/printk/printk.c:2401:3: note: Call to function 'strncpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'strncpy_s' in case of C11 strncpy(buf, str, sizeof(buf) - 1); ^~~~~~~ kernel/printk/printk.c:2633:2: warning: Value stored to 'do_cond_resched= ' is never read [clang-analyzer-deadcode.DeadStores] do_cond_resched =3D console_may_schedule; ^ ~~~~~~~~~~~~~~~~~~~~ kernel/printk/printk.c:2633:2: note: Value stored to 'do_cond_resched' i= s never read do_cond_resched =3D console_may_schedule; ^ ~~~~~~~~~~~~~~~~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. fs/xfs/xfs_fsmap.c:353:26: warning: Access to field 'bc_mp' results in a= dereference of a null pointer (loaded from variable 'cur') [clang-analyzer= -core.NullDereference] struct xfs_mount *mp =3D cur->bc_mp; ^ fs/xfs/xfs_fsmap.c:729:9: note: Calling '__xfs_getfsmap_datadev' return __xfs_getfsmap_datadev(tp, keys, info, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/xfs_fsmap.c:594:6: note: Assuming 'eofs' is > field 'fmr_physical' if (keys[0].fmr_physical >=3D eofs) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/xfs_fsmap.c:594:2: note: Taking false branch if (keys[0].fmr_physical >=3D eofs) ^ fs/xfs/xfs_fsmap.c:597:33: note: Assuming '__UNIQUE_ID___x1474' is >=3D = '__UNIQUE_ID___y1475' end_fsb =3D XFS_DADDR_TO_FSB(mp, min(eofs - 1, keys[1].fmr_physi= cal)); ^ include/linux/minmax.h:45:19: note: expanded from macro 'min' #define min(x, y) __careful_cmp(x, y, <) ^ include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) ^ include/linux/minmax.h:28:26: note: expanded from macro '__cmp' #define __cmp(x, y, op) ((x) op (y) ? (x) : (y)) ^ fs/xfs/libxfs/xfs_format.h:430:25: note: expanded from macro 'XFS_DADDR_= TO_FSB' xfs_daddr_to_agno(mp,d), xfs_daddr_to_agbno(mp,d= )) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~ fs/xfs/libxfs/xfs_format.h:663:20: note: expanded from macro 'XFS_AGB_TO= _FSB' (((xfs_fsblock_t)(agno) << (mp)->m_sb.sb_agblklog) | (agbno)) ^~~~ fs/xfs/xfs_fsmap.c:597:33: note: '?' condition is false end_fsb =3D XFS_DADDR_TO_FSB(mp, min(eofs - 1, keys[1].fmr_physi= cal)); ^ include/linux/minmax.h:45:19: note: expanded from macro 'min' #define min(x, y) __careful_cmp(x, y, <) ^ include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) -- ^~~~~~ kernel/bpf/hashtab.c:801:3: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(next_key, next_l->key, key_size); ^~~~~~ kernel/bpf/hashtab.c:801:3: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(next_key, next_l->key, key_size); ^~~~~~ kernel/bpf/hashtab.c:819:4: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(next_key, next_l->key, key_size); ^~~~~~ kernel/bpf/hashtab.c:819:4: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(next_key, next_l->key, key_size); ^~~~~~ kernel/bpf/hashtab.c:874:3: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(this_cpu_ptr(pptr), value, htab->map.value_size); ^~~~~~ kernel/bpf/hashtab.c:874:3: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(this_cpu_ptr(pptr), value, htab->map.value_size); ^~~~~~ kernel/bpf/hashtab.c:906:5: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(per_cpu_ptr(pptr, cpu), 0, size); ^~~~~~ kernel/bpf/hashtab.c:906:5: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(per_cpu_ptr(pptr, cpu), 0, size); ^~~~~~ kernel/bpf/hashtab.c:968:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(l_new->key, key, key_size); ^~~~~~ kernel/bpf/hashtab.c:968:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(l_new->key, key, key_size); ^~~~~~ kernel/bpf/hashtab.c:990:3: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(l_new->key + round_up(key_size, 8), value, size); ^~~~~~ kernel/bpf/hashtab.c:990:3: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(l_new->key + round_up(key_size, 8), value, size); ^~~~~~ kernel/bpf/hashtab.c:1708:3: warning: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dst_key, l->key, key_size); ^~~~~~ kernel/bpf/hashtab.c:1708:3: note: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 memcpy(dst_key, l->key, key_size); ^~~~~~ kernel/bpf/hashtab.c:1904:3: warning: Value stored to 'b' is never read = [clang-analyzer-deadcode.DeadStores] b =3D &htab->buckets[bucket_id++]; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~ kernel/bpf/hashtab.c:1904:3: note: Value stored to 'b' is never read b =3D &htab->buckets[bucket_id++]; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 77 warnings (77 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 5 warnings generated. arch/arm/kernel/early_printk.c:20:3: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, s, l); ^~~~~~ arch/arm/kernel/early_printk.c:20:3: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, s, l); ^~~~~~ Suppressed 4 warnings (4 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 16 warnings generated. Suppressed 16 warnings (16 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (44 in non-user code, 2 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. arch/arm/mm/nommu.c:173:2: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dst, src, len); ^~~~~~ arch/arm/mm/nommu.c:173:2: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(dst, src, len); ^~~~~~ Suppressed 47 warnings (44 in non-user code, 3 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. Suppressed 33 warnings (32 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. >> fs/squashfs/lz4_wrapper.c:105:3: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buff, data + offset, avail); ^~~~~~ fs/squashfs/lz4_wrapper.c:105:3: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(buff, data + offset, avail); ^~~~~~ fs/squashfs/lz4_wrapper.c:122:4: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data, buff, bytes); ^~~~~~ fs/squashfs/lz4_wrapper.c:122:4: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(data, buff, bytes); ^~~~~~ fs/squashfs/lz4_wrapper.c:125:3: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data, buff, PAGE_SIZE); ^~~~~~ fs/squashfs/lz4_wrapper.c:125:3: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(data, buff, PAGE_SIZE); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. fs/orangefs/dcache.c:36:2: warning: Call to function 'strncpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(new_op->upcall.req.lookup.d_name, ^~~~~~~ fs/orangefs/dcache.c:36:2: note: Call to function 'strncpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'strncpy_s' in case of C11 strncpy(new_op->upcall.req.lookup.d_name, ^~~~~~~ Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. fs/orangefs/inode.c:836:3: warning: Value stored to 'ret' is never read = [clang-analyzer-deadcode.DeadStores] ret =3D posix_acl_chmod(&init_user_ns, inode, inode->i_m= ode); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~ fs/orangefs/inode.c:836:3: note: Value stored to 'ret' is never read ret =3D posix_acl_chmod(&init_user_ns, inode, inode->i_m= ode); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~ fs/orangefs/inode.c:914:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(&iattr, 0, sizeof iattr); ^~~~~~ fs/orangefs/inode.c:914:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(&iattr, 0, sizeof iattr); ^~~~~~ Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. fs/orangefs/orangefs-sysfs.c:630:9: warning: Call to function 'sscanf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] rc =3D sscanf(buf, "%d %d", &val1, &val2); ^~~~~~ fs/orangefs/orangefs-sysfs.c:630:9: note: Call to function 'sscanf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sscanf_s' in case of C11 rc =3D sscanf(buf, "%d %d", &val1, &val2); ^~~~~~ Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 57 warnings generated. fs/orangefs/super.c:118:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(&orangefs_inode->refn.khandle, 0, 16); ^~~~~~ fs/orangefs/super.c:118:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(&orangefs_inode->refn.khandle, 0, 16); ^~~~~~ fs/orangefs/super.c:121:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(orangefs_inode->link_target, 0, sizeof(orangefs_inode->li= nk_target)); ^~~~~~ fs/orangefs/super.c:121:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(orangefs_inode->link_target, 0, sizeof(orangefs_inode->li= nk_target)); ^~~~~~ fs/orangefs/super.c:204:2: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf->f_fsid, &ORANGEFS_SB(sb)->fs_id, sizeof(buf->f_fsid= )); ^~~~~~ fs/orangefs/super.c:204:2: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(&buf->f_fsid, &ORANGEFS_SB(sb)->fs_id, sizeof(buf->f_fsid= )); ^~~~~~ fs/orangefs/super.c:256:2: warning: Call to function 'strncpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(new_op->upcall.req.fs_mount.orangefs_config_server, ^~~~~~~ fs/orangefs/super.c:256:2: note: Call to function 'strncpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'strncpy_s' in case of C11 strncpy(new_op->upcall.req.fs_mount.orangefs_config_server, ^~~~~~~ fs/orangefs/super.c:403:2: warning: Call to function 'strncpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(op->upcall.req.fs_umount.orangefs_config_server, ^~~~~~~ fs/orangefs/super.c:403:2: note: Call to function 'strncpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'strncpy_s' in case of C11 strncpy(op->upcall.req.fs_umount.orangefs_config_server, ^~~~~~~ fs/orangefs/super.c:480:22: warning: Value stored to 'sb' during its ini= tialization is never read [clang-analyzer-deadcode.DeadStores] struct super_block *sb =3D ERR_PTR(-EINVAL); ^~ ~~~~~~~~~~~~~~~~ fs/orangefs/super.c:480:22: note: Value stored to 'sb' during its initia= lization is never read struct super_block *sb =3D ERR_PTR(-EINVAL); ^~ ~~~~~~~~~~~~~~~~ fs/orangefs/super.c:497:2: warning: Call to function 'strncpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(new_op->upcall.req.fs_mount.orangefs_config_server, ^~~~~~~ fs/orangefs/super.c:497:2: note: Call to function 'strncpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'strncpy_s' in case of C11 strncpy(new_op->upcall.req.fs_mount.orangefs_config_server, ^~~~~~~ fs/orangefs/super.c:546:2: warning: Call to function 'strncpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(ORANGEFS_SB(sb)->devname, -- fs/binfmt_flat.c:1030:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 start_thread(regs, start_addr, current->mm->start_stack); ^ arch/arm/include/asm/processor.h:61:2: note: expanded from macro 'start_= thread' memset(regs->uregs, 0, sizeof(regs->uregs)); \ ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. arch/arm/mach-s3c/adc.c:200:2: warning: Value stored to 'ret' is never r= ead [clang-analyzer-deadcode.DeadStores] ret =3D wait_event_timeout(wake, client->result >=3D 0, HZ / 2); ^ arch/arm/mach-s3c/adc.c:200:2: note: Value stored to 'ret' is never read Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. arch/arm/mach-s3c/pm-gpio.c:37:6: warning: Value stored to 'old_gpdat' d= uring its initialization is never read [clang-analyzer-deadcode.DeadStores] u32 old_gpdat =3D __raw_readl(base + OFFS_DAT); ^~~~~~~~~ arch/arm/mach-s3c/pm-gpio.c:37:6: note: Value stored to 'old_gpdat' duri= ng its initialization is never read u32 old_gpdat =3D __raw_readl(base + OFFS_DAT); ^~~~~~~~~ arch/arm/mach-s3c/pm-gpio.c:124:6: warning: Value stored to 'old_gpdat' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] u32 old_gpdat =3D __raw_readl(base + OFFS_DAT); ^~~~~~~~~ arch/arm/mach-s3c/pm-gpio.c:124:6: note: Value stored to 'old_gpdat' dur= ing its initialization is never read u32 old_gpdat =3D __raw_readl(base + OFFS_DAT); ^~~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 79 warnings generated. kernel/fork.c:1051:2: warning: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecur= eAPI.DeprecatedOrUnsafeBufferHandling] memset(&mm->rss_stat, 0, sizeof(mm->rss_stat)); ^~~~~~ kernel/fork.c:1051:2: note: Call to function 'memset' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memset_s' in case of C11 memset(&mm->rss_stat, 0, sizeof(mm->rss_stat)); ^~~~~~ kernel/fork.c:1102:2: warning: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecur= eAPI.DeprecatedOrUnsafeBufferHandling] memset(mm, 0, sizeof(*mm)); ^~~~~~ kernel/fork.c:1102:2: note: Call to function 'memset' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memset_s' in case of C11 memset(mm, 0, sizeof(*mm)); ^~~~~~ kernel/fork.c:1446:2: warning: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecur= eAPI.DeprecatedOrUnsafeBufferHandling] memcpy(mm, oldmm, sizeof(*mm)); ^~~~~~ kernel/fork.c:1446:2: note: Call to function 'memcpy' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memcpy_s' in case of C11 memcpy(mm, oldmm, sizeof(*mm)); ^~~~~~ kernel/fork.c:1575:2: warning: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecur= eAPI.DeprecatedOrUnsafeBufferHandling] memcpy(sig->action, current->sighand->action, sizeof(sig->action= )); ^~~~~~ kernel/fork.c:1575:2: note: Call to function 'memcpy' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memcpy_s' in case of C11 memcpy(sig->action, current->sighand->action, sizeof(sig->action= )); ^~~~~~ kernel/fork.c:1643:2: warning: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecur= eAPI.DeprecatedOrUnsafeBufferHandling] memcpy(sig->rlim, current->signal->rlim, sizeof sig->rlim); ^~~~~~ kernel/fork.c:1643:2: note: Call to function 'memcpy' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memcpy_s' in case of C11 memcpy(sig->rlim, current->signal->rlim, sizeof sig->rlim); ^~~~~~ kernel/fork.c:2108:2: warning: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecur= eAPI.DeprecatedOrUnsafeBufferHandling] memset(&p->irqtrace, 0, sizeof(p->irqtrace)); ^~~~~~ kernel/fork.c:2108:2: note: Call to function 'memset' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memset_s' in case of C11 memset(&p->irqtrace, 0, sizeof(p->irqtrace)); ^~~~~~ Suppressed 73 warnings (70 in non-user code, 3 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. >> arch/arm/mach-s3c/init.c:114:2: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(cfgptr, cfg, sizeof(struct s3c2410_uartcfg) * no); ^~~~~~ arch/arm/mach-s3c/init.c:114:2: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(cfgptr, cfg, sizeof(struct s3c2410_uartcfg) * no); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. fs/nilfs2/inode.c:643:3: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset((void *)raw_inode + sizeof(*raw_inode), 0, ^~~~~~ fs/nilfs2/inode.c:643:3: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset((void *)raw_inode + sizeof(*raw_inode), 0, ^~~~~~ fs/nilfs2/inode.c:668:3: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(raw_inode, 0, NILFS_MDT(ifile)->mi_entry_size); ^~~~~~ fs/nilfs2/inode.c:668:3: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(raw_inode, 0, NILFS_MDT(ifile)->mi_entry_size); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 53 warnings generated. fs/nilfs2/dir.c:161:2: warning: Value stored to 'error' is never read [c= lang-analyzer-deadcode.DeadStores] error =3D "rec_len is smaller than minimal"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:161:2: note: Value stored to 'error' is never read error =3D "rec_len is smaller than minimal"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:164:2: warning: Value stored to 'error' is never read [c= lang-analyzer-deadcode.DeadStores] error =3D "unaligned directory entry"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:164:2: note: Value stored to 'error' is never read error =3D "unaligned directory entry"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:167:2: warning: Value stored to 'error' is never read [c= lang-analyzer-deadcode.DeadStores] error =3D "rec_len is too small for name_len"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:167:2: note: Value stored to 'error' is never read error =3D "rec_len is too small for name_len"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:170:2: warning: Value stored to 'error' is never read [c= lang-analyzer-deadcode.DeadStores] error =3D "directory entry across blocks"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:170:2: note: Value stored to 'error' is never read error =3D "directory entry across blocks"; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:179:2: warning: Value stored to 'p' is never read [clang= -analyzer-deadcode.DeadStores] p =3D (struct nilfs_dir_entry *)(kaddr + offs); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:179:2: note: Value stored to 'p' is never read p =3D (struct nilfs_dir_entry *)(kaddr + offs); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/nilfs2/dir.c:518:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(de->name, name, namelen); ^~~~~~ fs/nilfs2/dir.c:518:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(de->name, name, namelen); ^~~~~~ fs/nilfs2/dir.c:597:2: warning: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memset(kaddr, 0, chunk_size); ^~~~~~ fs/nilfs2/dir.c:597:2: note: Call to function 'memset' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memset_s' in case of C11 memset(kaddr, 0, chunk_size); ^~~~~~ fs/nilfs2/dir.c:601:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(de->name, ".\0\0", 4); ^~~~~~ fs/nilfs2/dir.c:601:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(de->name, ".\0\0", 4); ^~~~~~ fs/nilfs2/dir.c:609:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(de->name, "..\0", 4); ^~~~~~ fs/nilfs2/dir.c:609:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(de->name, "..\0", 4); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. fs/ntfs/inode.c:130:3: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ni->name, na->name, i); ^~~~~~ fs/ntfs/inode.c:130:3: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(ni->name, na->name, i); ^~~~~~ fs/ntfs/inode.c:749:4: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ni->attr_list, (u8*)a + le16_to_cpu( ^~~~~~ fs/ntfs/inode.c:749:4: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(ni->attr_list, (u8*)a + le16_to_cpu( ^~~~~~ fs/ntfs/inode.c:1814:3: warning: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insec= ureAPI.DeprecatedOrUnsafeBufferHandling] memcpy((char*)m + (i << sb->s_blocksize_bits), bh->b_dat= a, -- ^ fs/jfs/jfs_dmap.c:4012:6: note: 'sz' is < 'nblocks' if (sz < nblocks) ^~ fs/jfs/jfs_dmap.c:4012:2: note: Taking true branch if (sz < nblocks) ^ fs/jfs/jfs_dmap.c:4016:2: note: Returning the value 57 return (l2sz - L2MAXAG); ^~~~~~~~~~~~~~~~~~~~~~~ fs/jfs/jfs_dmap.c:3407:13: note: Returning from 'dbGetL2AGSize' l2agsize =3D dbGetL2AGSize(newsize); ^~~~~~~~~~~~~~~~~~~~~~ fs/jfs/jfs_dmap.c:3407:2: note: The value 57 is assigned to 'l2agsize' l2agsize =3D dbGetL2AGSize(newsize); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/jfs/jfs_dmap.c:3411:21: note: The result of the left shift is undefin= ed due to shifting by '57', which is greater or equal to the width of type = 'int' bmp->db_agsize =3D 1 << l2agsize; ^ ~~~~~~~~ fs/jfs/jfs_dmap.c:3750:4: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&dp->wmap[0], 0, LPERDMAP * 4); ^~~~~~ fs/jfs/jfs_dmap.c:3750:4: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(&dp->wmap[0], 0, LPERDMAP * 4); ^~~~~~ fs/jfs/jfs_dmap.c:3751:4: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&dp->pmap[0], 0, LPERDMAP * 4); ^~~~~~ fs/jfs/jfs_dmap.c:3751:4: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(&dp->pmap[0], 0, LPERDMAP * 4); ^~~~~~ fs/jfs/jfs_dmap.c:3786:4: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&dp->wmap[w], 0, nw * 4); ^~~~~~ fs/jfs/jfs_dmap.c:3786:4: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(&dp->wmap[w], 0, nw * 4); ^~~~~~ fs/jfs/jfs_dmap.c:3787:4: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&dp->pmap[w], 0, nw * 4); ^~~~~~ fs/jfs/jfs_dmap.c:3787:4: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(&dp->pmap[w], 0, nw * 4); ^~~~~~ fs/jfs/jfs_dmap.c:4011:15: warning: The result of the left shift is unde= fined due to shifting by '64', which is greater or equal to the width of ty= pe 's64' [clang-analyzer-core.UndefinedBinaryOperatorResult] sz =3D (s64) 1 << l2sz; ^ fs/jfs/jfs_dmap.c:3392:2: note: Loop condition is false. Exiting loop jfs_info("dbExtendFS: blkno:%Ld nblocks:%Ld newsize:%Ld", ^ fs/jfs/jfs_debug.h:84:31: note: expanded from macro 'jfs_info' #define jfs_info(fmt, arg...) do {} while (0) ^ fs/jfs/jfs_dmap.c:3404:21: note: Assuming the condition is true bmp->db_maxlevel =3D BMAPSZTOLEV(bmp->db_mapsize); ^ fs/jfs/jfs_dmap.h:117:4: note: expanded from macro 'BMAPSZTOLEV' (((size) <=3D MAXL0SIZE) ? 0 : ((size) <=3D MAXL1SIZE) ? 1 : 2) ^~~~~~~~~~~~~~~~~~~ fs/jfs/jfs_dmap.c:3404:21: note: '?' condition is true bmp->db_maxlevel =3D BMAPSZTOLEV(bmp->db_mapsize); ^ fs/jfs/jfs_dmap.h:117:3: note: expanded from macro 'BMAPSZTOLEV' (((size) <=3D MAXL0SIZE) ? 0 : ((size) <=3D MAXL1SIZE) ? 1 : 2) ^ fs/jfs/jfs_dmap.c:3407:13: note: Calling 'dbGetL2AGSize' l2agsize =3D dbGetL2AGSize(newsize); ^~~~~~~~~~~~~~~~~~~~~~ fs/jfs/jfs_dmap.c:4001:6: note: Assuming the condition is false if (nblocks < BPERDMAP * MAXAG) ^~~~~~~~~~~~~~~~~~~~~~~~~~ fs/jfs/jfs_dmap.c:4001:2: note: Taking false branch if (nblocks < BPERDMAP * MAXAG) ^ fs/jfs/jfs_dmap.c:4006:7: note: The value 64 is assigned to 'l2sz' for (l2sz =3D 64; l2sz >=3D 0; l2sz--, m >>=3D 1) { ^~~~~~~~~ fs/jfs/jfs_dmap.c:4006:2: note: Loop condition is true. Entering loop b= ody for (l2sz =3D 64; l2sz >=3D 0; l2sz--, m >>=3D 1) { ^ fs/jfs/jfs_dmap.c:4007:7: note: Assuming the condition is true if (m & nblocks) ^~~~~~~~~~~ fs/jfs/jfs_dmap.c:4007:3: note: Taking true branch if (m & nblocks) ^ fs/jfs/jfs_dmap.c:4008:4: note: Execution continues on line 4011 break; ^ fs/jfs/jfs_dmap.c:4011:15: note: The result of the left shift is undefin= ed due to shifting by '64', which is greater or equal to the width of type = 's64' sz =3D (s64) 1 << l2sz; ^ ~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. security/integrity/evm/evm_secfs.c:48:2: warning: Call to function 'spri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'sprintf_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(temp, "%d", (evm_initialized & ~EVM_SETUP_COMPLETE)); ^~~~~~~ security/integrity/evm/evm_secfs.c:48:2: note: Call to function 'sprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sprintf_s' in case of C11 sprintf(temp, "%d", (evm_initialized & ~EVM_SETUP_COMPLETE)); ^~~~~~~ >> security/integrity/evm/evm_secfs.c:159:3: warning: Call to function 'spr= intf' is insecure as it does not provide bounding of the memory buffer or s= ecurity checks introduced in the C11 standard. Replace with analogous funct= ions that support length arguments or provides boundary checks such as 'spr= intf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUns= afeBufferHandling] sprintf(temp + offset, "%s\n", xattr->name); ^~~~~~~ security/integrity/evm/evm_secfs.c:159:3: note: Call to function 'sprint= f' is insecure as it does not provide bounding of the memory buffer or secu= rity checks introduced in the C11 standard. Replace with analogous function= s that support length arguments or provides boundary checks such as 'sprint= f_s' in case of C11 sprintf(temp + offset, "%s\n", xattr->name); ^~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 25 warnings generated. Suppressed 25 warnings (25 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. mm/debug.c:266:3: warning: Call to function 'memset' is insecure as it d= oes not provide security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'memset_s' in case of C11 [clang-analyzer-security.insecureAPI= .DeprecatedOrUnsafeBufferHandling] memset(page, PAGE_POISON_PATTERN, size); ^~~~~~ mm/debug.c:266:3: note: Call to function 'memset' is insecure as it does= not provide security checks introduced in the C11 standard. Replace with a= nalogous functions that support length arguments or provides boundary check= s such as 'memset_s' in case of C11 memset(page, PAGE_POISON_PATTERN, size); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 52 warnings generated. mm/nommu.c:208:2: warning: Call to function 'memcpy' is insecure as it d= oes not provide security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureAPI= .DeprecatedOrUnsafeBufferHandling] memcpy(buf, addr, count); ^~~~~~ mm/nommu.c:208:2: note: Call to function 'memcpy' is insecure as it does= not provide security checks introduced in the C11 standard. Replace with a= nalogous functions that support length arguments or provides boundary check= s such as 'memcpy_s' in case of C11 memcpy(buf, addr, count); ^~~~~~ mm/nommu.c:867:6: warning: Value stored to 'prot' is never read [clang-a= nalyzer-deadcode.DeadStores] prot |=3D PROT_EXEC; ^ mm/nommu.c:867:6: note: Value stored to 'prot' is never read mm/nommu.c:885:4: warning: Value stored to 'prot' is never read [clang-a= nalyzer-deadcode.DeadStores] prot |=3D PROT_EXEC; ^ mm/nommu.c:885:4: note: Value stored to 'prot' is never read mm/nommu.c:996:12: warning: The result of the left shift is undefined du= e to shifting by '32', which is greater or equal to the width of type 'int'= [clang-analyzer-core.UndefinedBinaryOperatorResult] total =3D 1 << order; ^ mm/nommu.c:1077:6: note: 'ret' is >=3D 0 if (ret < 0) ^~~ mm/nommu.c:1077:2: note: Taking false branch if (ret < 0) ^ mm/nommu.c:1090:6: note: Assuming 'region' is non-null if (!region) ^~~~~~~ mm/nommu.c:1090:2: note: Taking false branch if (!region) ^ mm/nommu.c:1094:6: note: Assuming 'vma' is non-null if (!vma) ^~~~ mm/nommu.c:1094:2: note: Taking false branch if (!vma) ^ mm/nommu.c:1104:6: note: 'file' is null if (file) { ^~~~ mm/nommu.c:1104:2: note: Taking false branch if (file) { ^ mm/nommu.c:1119:6: note: Assuming the condition is false if (vm_flags & VM_MAYSHARE) { ^~~~~~~~~~~~~~~~~~~~~~ mm/nommu.c:1119:2: note: Taking false branch if (vm_flags & VM_MAYSHARE) { ^ mm/nommu.c:1216:6: note: 'file' is null if (file && vma->vm_flags & VM_SHARED) ^~~~ mm/nommu.c:1216:11: note: Left side of '&&' is false if (file && vma->vm_flags & VM_SHARED) ^ mm/nommu.c:1219:9: note: Calling 'do_mmap_private' ret =3D do_mmap_private(vma, region, len, capabilities); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ mm/nommu.c:974:2: note: Taking false branch if (capabilities & NOMMU_MAP_DIRECT) { ^ mm/nommu.c:995:10: note: Calling 'get_order' order =3D get_order(len); ^~~~~~~~~~~~~~ include/asm-generic/getorder.h:31:2: note: Taking false branch if (__builtin_constant_p(size)) { ^ include/asm-generic/getorder.h:44:9: note: Calling 'fls' return fls(size); ^~~~~~~~~ include/asm-generic/bitops/fls.h:15:2: note: 'r' initialized to 32 int r =3D 32; ^~~~~ -- ^ fs/ntfs/aops.c:1104:2: note: Taking false branch BUG_ON(!PageUptodate(page)); ^ include/asm-generic/bug.h:65:32: note: expanded from macro 'BUG_ON' #define BUG_ON(condition) do { if (unlikely(condition)) BUG(); } while (= 0) ^ fs/ntfs/aops.c:1104:2: note: Loop condition is false. Exiting loop BUG_ON(!PageUptodate(page)); ^ include/asm-generic/bug.h:65:27: note: expanded from macro 'BUG_ON' #define BUG_ON(condition) do { if (unlikely(condition)) BUG(); } while (= 0) ^ fs/ntfs/aops.c:1106:2: note: Loop condition is true. Entering loop body for (i =3D 0; i < nr_bhs; i++) { ^ fs/ntfs/aops.c:1110:3: note: Taking false branch if (i % bhs_per_rec) ^ fs/ntfs/aops.c:1114:7: note: 'is_mft' is false if (is_mft) { ^~~~~~ fs/ntfs/aops.c:1114:3: note: Taking false branch if (is_mft) { ^ fs/ntfs/aops.c:1151:7: note: Assuming 'err2' is not equal to 0 if (unlikely(err2)) { ^ include/linux/compiler.h:78:40: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^~~~ fs/ntfs/aops.c:1151:3: note: Taking true branch if (unlikely(err2)) { ^ fs/ntfs/aops.c:1152:9: note: 'err' is 0 if (!err || err =3D=3D -ENOMEM) ^~~ fs/ntfs/aops.c:1152:13: note: Left side of '||' is true if (!err || err =3D=3D -ENOMEM) ^ fs/ntfs/aops.c:1166:13: note: The value 1 is assigned to 'i' } while (++i % bhs_per_rec); ^~~ fs/ntfs/aops.c:1163:4: note: Loop condition is true. Execution continues= on line 1164 do { ^ fs/ntfs/aops.c:1164:5: note: 1st function call argument is an uninitiali= zed value clear_buffer_dirty(bhs[i]); ^ ~~~~~~ fs/ntfs/aops.c:1482:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy((u8*)ctx->attr + ^~~~~~ fs/ntfs/aops.c:1482:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy((u8*)ctx->attr + ^~~~~~ fs/ntfs/aops.c:1486:2: warning: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memset(addr + attr_len, 0, PAGE_SIZE - attr_len); ^~~~~~ fs/ntfs/aops.c:1486:2: note: Call to function 'memset' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memset_s' in case of C11 memset(addr + attr_len, 0, PAGE_SIZE - attr_len); ^~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. fs/filesystems.c:227:3: warning: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insec= ureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, p->name, len); ^~~~~~ fs/filesystems.c:227:3: note: Call to function 'memcpy' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'memcpy_s' in case of C11 memcpy(buf, p->name, len); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. fs/hfsplus/xattr_security.c:53:3: warning: Call to function 'strcpy' is = insecure as it does not provide bounding of the memory buffer. Replace unbo= unded copy functions with analogous functions that support length arguments= such as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(xattr_name, XATTR_SECURITY_PREFIX); ^~~~~~ fs/hfsplus/xattr_security.c:53:3: note: Call to function 'strcpy' is ins= ecure as it does not provide bounding of the memory buffer. Replace unbound= ed copy functions with analogous functions that support length arguments su= ch as 'strlcpy'. CWE-119 strcpy(xattr_name, XATTR_SECURITY_PREFIX); ^~~~~~ fs/hfsplus/xattr_security.c:54:3: warning: Call to function 'strcpy' is = insecure as it does not provide bounding of the memory buffer. Replace unbo= unded copy functions with analogous functions that support length arguments= such as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(xattr_name + ^~~~~~ fs/hfsplus/xattr_security.c:54:3: note: Call to function 'strcpy' is ins= ecure as it does not provide bounding of the memory buffer. Replace unbound= ed copy functions with analogous functions that support length arguments su= ch as 'strlcpy'. CWE-119 strcpy(xattr_name + ^~~~~~ fs/hfsplus/xattr_security.c:56:3: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(xattr_name + ^~~~~~ fs/hfsplus/xattr_security.c:56:3: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(xattr_name + ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. >> block/partitions/aix.c:95:3: warning: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, data, copied); ^~~~~~ block/partitions/aix.c:95:3: note: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 memcpy(buffer, data, copied); ^~~~~~ >> block/partitions/aix.c:183:4: warning: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(tmp, sizeof(tmp), ^~~~~~~~ block/partitions/aix.c:183:4: note: Call to function 'snprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'snprintf_s' in case of C11 snprintf(tmp, sizeof(tmp), ^~~~~~~~ block/partitions/aix.c:189:4: warning: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(tmp, sizeof(tmp), ^~~~~~~~ block/partitions/aix.c:189:4: note: Call to function 'snprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'snprintf_s' in case of C11 snprintf(tmp, sizeof(tmp), ^~~~~~~~ block/partitions/aix.c:259:5: warning: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(tmp, sizeof(tmp), " <%s>\n", ^~~~~~~~ block/partitions/aix.c:259:5: note: Call to function 'snprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'snprintf_s' in case of C11 snprintf(tmp, sizeof(tmp), " <%s>\n", ^~~~~~~~ block/partitions/aix.c:272:5: warning: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(tmp, sizeof(tmp), "%s", n[i].na= me); ^~~~~~~~ block/partitions/aix.c:272:5: note: Call to function 'snprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'snprintf_s' in case of C11 snprintf(tmp, sizeof(tmp), "%s", n[i].na= me); ^~~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. security/integrity/ima/ima_init.c:57:2: warning: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(iint, 0, sizeof(*iint)); ^~~~~~ security/integrity/ima/ima_init.c:57:2: note: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 memset(iint, 0, sizeof(*iint)); ^~~~~~ security/integrity/ima/ima_init.c:58:2: warning: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&hash, 0, sizeof(hash)); ^~~~~~ security/integrity/ima/ima_init.c:58:2: note: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 memset(&hash, 0, sizeof(hash)); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 67 warnings generated. security/commoncap.c:441:5: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&nscap->data, &cap->data, sizeof(= __le32) * 2 * VFS_CAP_U32); ^~~~~~ security/commoncap.c:441:5: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(&nscap->data, &cap->data, sizeof(= __le32) * 2 * VFS_CAP_U32); ^~~~~~ security/commoncap.c:472:4: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&cap->data, &nscap->data, sizeof(__le32) = * 2 * VFS_CAP_U32); ^~~~~~ security/commoncap.c:472:4: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(&cap->data, &nscap->data, sizeof(__le32) = * 2 * VFS_CAP_U32); ^~~~~~ security/commoncap.c:582:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&nscap->data, &cap->data, sizeof(__le32) * 2 * VFS_CAP_U3= 2); ^~~~~~ security/commoncap.c:582:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(&nscap->data, &cap->data, sizeof(__le32) * 2 * VFS_CAP_U3= 2); ^~~~~~ security/commoncap.c:660:2: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(cpu_caps, 0, sizeof(struct cpu_vfs_cap_data)); ^~~~~~ security/commoncap.c:660:2: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(cpu_caps, 0, sizeof(struct cpu_vfs_cap_data)); ^~~~~~ Suppressed 63 warnings (63 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. Suppressed 49 warnings (49 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 74 warnings generated. fs/ext4/xattr.c:368:3: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy((char *)buf + blocksize * i, bhs[i]->b_data, ^~~~~~ fs/ext4/xattr.c:368:3: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy((char *)buf + blocksize * i, bhs[i]->b_data, ^~~~~~ fs/ext4/xattr.c:563:4: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, p, size); ^~~~~~ fs/ext4/xattr.c:563:4: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(buffer, p, size); ^~~~~~ fs/ext4/xattr.c:618:4: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, p, size); ^~~~~~ fs/ext4/xattr.c:618:4: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(buffer, p, size); ^~~~~~ fs/ext4/xattr.c:678:5: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, prefix, prefix_len); ^~~~~~ fs/ext4/xattr.c:678:5: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(buffer, prefix, prefix_len); ^~~~~~ fs/ext4/xattr.c:680:5: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, entry->e_name, entry->e_n= ame_len); -- ^~~~~~~~~~~~~~ drivers/gpio/gpio-pca953x.c:382:36: note: The result of the left shift i= s undefined due to shifting by '32', which is greater or equal to the width= of type 'unsigned long' int addr =3D (reg & PCAL_GPIO_MASK) << bank_shift; ^ ~~~~~~~~~~ include/linux/bitmap.h:552:13: warning: The left expression of the compo= und assignment is an uninitialized value. The computed value will also be g= arbage [clang-analyzer-core.uninitialized.Assign] map[index] &=3D ~(0xFFUL << offset); ^ drivers/gpio/gpio-pca953x.c:533:8: note: Calling 'pca953x_read_regs' ret =3D pca953x_read_regs(chip, chip->regs->output, reg_val); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/gpio/gpio-pca953x.c:414:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) { ^~~~~~~ drivers/gpio/gpio-pca953x.c:414:2: note: Taking false branch if (ret < 0) { ^ drivers/gpio/gpio-pca953x.c:419:7: note: The value 0 is assigned to 'i' for (i =3D 0; i < NBANK(chip); i++) ^~~~~ drivers/gpio/gpio-pca953x.c:419:14: note: Assuming the condition is true for (i =3D 0; i < NBANK(chip); i++) ^~~~~~~~~~~~~~~ drivers/gpio/gpio-pca953x.c:419:2: note: Loop condition is true. Enteri= ng loop body for (i =3D 0; i < NBANK(chip); i++) ^ drivers/gpio/gpio-pca953x.c:420:36: note: Passing the value 0 via 3rd pa= rameter 'start' bitmap_set_value8(val, value[i], i * BANK_SZ); ^~~~~~~~~~~ drivers/gpio/gpio-pca953x.c:420:3: note: Calling 'bitmap_set_value8' bitmap_set_value8(val, value[i], i * BANK_SZ); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/bitmap.h:549:2: note: 'index' initialized to 0 const size_t index =3D BIT_WORD(start); ^~~~~~~~~~~~~~~~~~ include/linux/bitmap.h:552:13: note: The left expression of the compound= assignment is an uninitialized value. The computed value will also be garb= age map[index] &=3D ~(0xFFUL << offset); ~~~~~~~~~~ ^ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 19 warnings generated. lib/crypto/blake2s-generic.c:56:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(m, block, BLAKE2S_BLOCK_SIZE); ^~~~~~ lib/crypto/blake2s-generic.c:56:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(m, block, BLAKE2S_BLOCK_SIZE); ^~~~~~ lib/crypto/blake2s-generic.c:58:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(v, state->h, 32); ^~~~~~ lib/crypto/blake2s-generic.c:58:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(v, state->h, 32); ^~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/pinctrl/devicetree.c:380:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(out_args, 0, sizeof(*out_args)); ^~~~~~ drivers/pinctrl/devicetree.c:380:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(out_args, 0, sizeof(*out_args)); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/pinctrl/pinctrl-axp209.c:204:22: warning: Value stored to 'pctl'= during its initialization is never read [clang-analyzer-deadcode.DeadStore= s] struct axp20x_pctl *pctl =3D pinctrl_dev_get_drvdata(pctldev); ^~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/pinctrl/pinctrl-axp209.c:204:22: note: Value stored to 'pctl' du= ring its initialization is never read struct axp20x_pctl *pctl =3D pinctrl_dev_get_drvdata(pctldev); ^~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. kernel/cgroup/cgroup-v1.c:1101:3: warning: Call to function 'strcpy' is = insecure as it does not provide bounding of the memory buffer. Replace unbo= unded copy functions with analogous functions that support length arguments= such as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(root->release_agent_path, ctx->release_agent); ^~~~~~ kernel/cgroup/cgroup-v1.c:1101:3: note: Call to function 'strcpy' is ins= ecure as it does not provide bounding of the memory buffer. Replace unbound= ed copy functions with analogous functions that support length arguments su= ch as 'strlcpy'. CWE-119 strcpy(root->release_agent_path, ctx->release_agent); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 18 warnings generated. >> kernel/utsname.c:70:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&ns->name, &old_ns->name, sizeof(ns->name)); ^~~~~~ kernel/utsname.c:70:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(&ns->name, &old_ns->name, sizeof(ns->name)); ^~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. fs/iomap/buffered-io.c:234:2: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(addr, iomap->inline_data, size); ^~~~~~ fs/iomap/buffered-io.c:234:2: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(addr, iomap->inline_data, size); ^~~~~~ fs/iomap/buffered-io.c:235:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(addr + size, 0, PAGE_SIZE - poff - size); ^~~~~~ fs/iomap/buffered-io.c:235:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 memset(addr + size, 0, PAGE_SIZE - poff - size); ^~~~~~ fs/iomap/buffered-io.c:705:2: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(iomap_inline_data(iomap, pos), addr, copied); ^~~~~~ fs/iomap/buffered-io.c:705:2: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(iomap_inline_data(iomap, pos), addr, copied); ^~~~~~ fs/iomap/buffered-io.c:1050:6: warning: Value stored to 'start' during i= ts initialization is never read [clang-analyzer-deadcode.DeadStores] u64 start =3D bio->bi_iter.bi_sector; ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~ fs/iomap/buffered-io.c:1050:6: note: Value stored to 'start' during its = initialization is never read u64 start =3D bio->bi_iter.bi_sector; ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~ fs/iomap/buffered-io.c:1051:9: warning: Value stored to 'offset' during = its initialization is never read [clang-analyzer-deadcode.DeadStores] loff_t offset =3D ioend->io_offset; ^~~~~~ ~~~~~~~~~~~~~~~~ fs/iomap/buffered-io.c:1051:9: note: Value stored to 'offset' during its= initialization is never read loff_t offset =3D ioend->io_offset; ^~~~~~ ~~~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 13 warnings generated. lib/oid_registry.c:142:16: warning: Call to function 'snprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D count =3D snprintf(buffer, bufsize, "%u.%u", n / 40, n %= 40); ^~~~~~~~ lib/oid_registry.c:142:16: note: Call to function 'snprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'snprintf_s' in case of C11 ret =3D count =3D snprintf(buffer, bufsize, "%u.%u", n / 40, n %= 40); ^~~~~~~~ lib/oid_registry.c:149:3: warning: Value stored to 'num' is never read [= clang-analyzer-deadcode.DeadStores] num =3D 0; ^ ~ lib/oid_registry.c:149:3: note: Value stored to 'num' is never read num =3D 0; ^ ~ lib/oid_registry.c:163:18: warning: Call to function 'snprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret +=3D count =3D snprintf(buffer, bufsize, ".%lu", num= ); ^~~~~~~~ lib/oid_registry.c:163:18: note: Call to function 'snprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'snprintf_s' in case of C11 ret +=3D count =3D snprintf(buffer, bufsize, ".%lu", num= ); ^~~~~~~~ lib/oid_registry.c:173:2: warning: Call to function 'snprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buffer, bufsize, "(bad)"); ^~~~~~~~ lib/oid_registry.c:173:2: note: Call to function 'snprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'snprintf_s' in case of C11 snprintf(buffer, bufsize, "(bad)"); ^~~~~~~~ Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 23 warnings generated. Suppressed 23 warnings (16 in non-user code, 7 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. arch/arm/include/asm/atomic.h:234:20: warning: Access to field 'counter'= results in a dereference of a null pointer (loaded from variable 'v') [cla= ng-analyzer-core.NullDereference] ATOMIC_OPS(andnot, &=3D ~, bic) ^ lib/sbitmap.c:669:14: note: Assuming 'i' is < 'nr_tags' for (i =3D 0; i < nr_tags; i++) { ^~~~~~~~~~~ lib/sbitmap.c:669:2: note: Loop condition is true. Entering loop body for (i =3D 0; i < nr_tags; i++) { ^ lib/sbitmap.c:675:8: note: 'addr' is null if (!addr) { ^~~~ lib/sbitmap.c:675:3: note: Taking true branch if (!addr) { ^ lib/sbitmap.c:669:14: note: Assuming 'i' is < 'nr_tags' for (i =3D 0; i < nr_tags; i++) { ^~~~~~~~~~~ lib/sbitmap.c:669:2: note: Loop condition is true. Entering loop body for (i =3D 0; i < nr_tags; i++) { ^ lib/sbitmap.c:674:3: note: Value assigned to 'this_addr' this_addr =3D &sb->map[SB_NR_TO_INDEX(sb, tag)].word; ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ lib/sbitmap.c:675:7: note: Assuming 'addr' is null if (!addr) { ^~~~~ lib/sbitmap.c:675:3: note: Taking true branch if (!addr) { -- ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/regulator/pca9450-regulator.c:171:6: warning: Assigned value is = garbage or undefined [clang-analyzer-core.uninitialized.Assign] i <<=3D ffs(desc->vsel_mask) - 1; ^ drivers/regulator/pca9450-regulator.c:191:2: note: Loop condition is tru= e. Entering loop body for (i =3D 0; i < PCA9450_DVS_LEVEL_MAX; i++) { ^ drivers/regulator/pca9450-regulator.c:192:3: note: Control jumps to 'cas= e PCA9450_DVS_LEVEL_RUN:' @line 193 switch (i) { ^ drivers/regulator/pca9450-regulator.c:197:4: note: Execution continues = on line 207 break; ^ drivers/regulator/pca9450-regulator.c:207:9: note: Calling 'buck_set_dvs' ret =3D buck_set_dvs(desc, np, cfg->regmap, prop, reg, m= ask); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~ drivers/regulator/pca9450-regulator.c:160:8: note: Calling 'of_property_= read_u32' ret =3D of_property_read_u32(np, prop, &uv); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/of.h:1323:9: note: Calling 'of_property_read_u32_array' return of_property_read_u32_array(np, propname, out_value, 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/of.h:1269:6: note: Assuming 'ret' is >=3D 0 if (ret >=3D 0) ^~~~~~~~ include/linux/of.h:1269:2: note: Taking true branch if (ret >=3D 0) ^ include/linux/of.h:1270:3: note: Returning zero, which participates in a= condition later return 0; ^~~~~~~~ include/linux/of.h:1323:9: note: Returning from 'of_property_read_u32_ar= ray' return of_property_read_u32_array(np, propname, out_value, 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/of.h:1323:2: note: Returning zero, which participates in a= condition later return of_property_read_u32_array(np, propname, out_value, 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/regulator/pca9450-regulator.c:160:8: note: Returning from 'of_pr= operty_read_u32' ret =3D of_property_read_u32(np, prop, &uv); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/regulator/pca9450-regulator.c:161:2: note: Taking false branch if (ret =3D=3D -EINVAL) ^ drivers/regulator/pca9450-regulator.c:163:11: note: 'ret' is 0 else if (ret) ^~~ drivers/regulator/pca9450-regulator.c:163:7: note: Taking false branch else if (ret) ^ drivers/regulator/pca9450-regulator.c:166:14: note: Assuming 'i' is < fi= eld 'n_voltages' for (i =3D 0; i < desc->n_voltages; i++) { ^~~~~~~~~~~~~~~~~~~~ drivers/regulator/pca9450-regulator.c:166:2: note: Loop condition is tru= e. Entering loop body for (i =3D 0; i < desc->n_voltages; i++) { ^ drivers/regulator/pca9450-regulator.c:168:7: note: Assuming 'ret' is >= =3D 0 if (ret < 0) ^~~~~~~ drivers/regulator/pca9450-regulator.c:168:3: note: Taking false branch if (ret < 0) ^ drivers/regulator/pca9450-regulator.c:170:7: note: Assuming 'ret' is equ= al to 'uv' if (ret =3D=3D uv) { ^~~~~~~~~ drivers/regulator/pca9450-regulator.c:170:3: note: Taking true branch if (ret =3D=3D uv) { ^ drivers/regulator/pca9450-regulator.c:171:6: note: Assigned value is gar= bage or undefined i <<=3D ffs(desc->vsel_mask) - 1; ^ ~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. fs/iomap/direct-io.c:405:4: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(iomap_inline_data(iomap, size), 0, pos - = size); ^~~~~~ fs/iomap/direct-io.c:405:4: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(iomap_inline_data(iomap, size), 0, pos - = size); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. >> drivers/tty/serial/8250/serial_cs.c:358:2: warning: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&uart, 0, sizeof(uart)); ^~~~~~ drivers/tty/serial/8250/serial_cs.c:358:2: note: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 memset(&uart, 0, sizeof(uart)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. fs/libfs.c:837:2: warning: Call to function 'memcpy' is insecure as it d= oes not provide security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureAPI= .DeprecatedOrUnsafeBufferHandling] memcpy(to, from + pos, count); ^~~~~~ fs/libfs.c:837:2: note: Call to function 'memcpy' is insecure as it does= not provide security checks introduced in the C11 standard. Replace with a= nalogous functions that support length arguments or provides boundary check= s such as 'memcpy_s' in case of C11 memcpy(to, from + pos, count); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 67 warnings generated. Suppressed 67 warnings (61 in non-user code, 6 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 64 warnings generated. kernel/sched/deadline.c:1534:22: warning: Value stored to 'p' during its= initialization is never read [clang-analyzer-deadcode.DeadStores] struct task_struct *p =3D dl_task_of(dl_se); ^ ~~~~~~~~~~~~~~~~~ kernel/sched/deadline.c:1534:22: note: Value stored to 'p' during its in= itialization is never read struct task_struct *p =3D dl_task_of(dl_se); ^ ~~~~~~~~~~~~~~~~~ Suppressed 63 warnings (61 in non-user code, 2 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 61 warnings generated. Suppressed 61 warnings (61 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 61 warnings generated. Suppressed 61 warnings (61 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 61 warnings generated. Suppressed 61 warnings (61 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 61 warnings generated. Suppressed 61 warnings (61 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 62 warnings generated. kernel/sched/autogroup.c:267:9: warning: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(buf, buflen, "%s-%ld", "/autogroup", tg->autogro= up->id); ^~~~~~~~ kernel/sched/autogroup.c:267:9: note: Call to function 'snprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'snprintf_s' in case of C11 return snprintf(buf, buflen, "%s-%ld", "/autogroup", tg->autogro= up->id); ^~~~~~~~ Suppressed 61 warnings (61 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 62 warnings generated. kernel/sched/cpuacct.c:269:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cputime, 0, sizeof(cputime)); ^~~~~~ kernel/sched/cpuacct.c:269:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 memset(&cputime, 0, sizeof(cputime)); ^~~~~~ Suppressed 61 warnings (61 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 61 warnings generated. Suppressed 61 warnings (61 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. drivers/char/ipmi/ipmi_plat_data.c:21:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(pr, 0, sizeof(pr)); ^~~~~~ drivers/char/ipmi/ipmi_plat_data.c:21:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(pr, 0, sizeof(pr)); ^~~~~~ drivers/char/ipmi/ipmi_plat_data.c:22:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(r, 0, sizeof(r)); ^~~~~~ drivers/char/ipmi/ipmi_plat_data.c:22:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(r, 0, sizeof(r)); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 58 warnings generated. drivers/char/ipmi/ipmi_ssif.c:750:4: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(msg->rsp, data, len); ^~~~~~ drivers/char/ipmi/ipmi_ssif.c:750:4: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(msg->rsp, data, len); ^~~~~~ drivers/char/ipmi/ipmi_ssif.c:817:37: warning: Array access (via field '= rsp') results in a null pointer dereference [clang-analyzer-core.NullDerefe= rence] if ((result < 0) || (len < 3) || (msg->rsp[2] !=3D 0)) { ^ ~~~ drivers/char/ipmi/ipmi_ssif.c:618:6: note: Assuming 'result' is >=3D 0 if (result < 0) { ^~~~~~~~~~ drivers/char/ipmi/ipmi_ssif.c:618:2: note: Taking false branch if (result < 0) { ^ drivers/char/ipmi/ipmi_ssif.c:642:7: note: Assuming 'len' is > 1 if ((len > 1) && (ssif_info->multi_pos =3D=3D 0) ^~~~~~~ drivers/char/ipmi/ipmi_ssif.c:642:6: note: Left side of '&&' is true if ((len > 1) && (ssif_info->multi_pos =3D=3D 0) ^ drivers/char/ipmi/ipmi_ssif.c:642:20: note: Assuming field 'multi_pos' i= s equal to 0 if ((len > 1) && (ssif_info->multi_pos =3D=3D 0) -- 47 warnings generated. fs/xfs/xfs_itable.c:309:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(bs1, 0, sizeof(struct xfs_bstat)); ^~~~~~ fs/xfs/xfs_itable.c:309:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(bs1, 0, sizeof(struct xfs_bstat)); ^~~~~~ fs/xfs/xfs_itable.c:437:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(ig1, 0, sizeof(struct xfs_inogrp)); ^~~~~~ fs/xfs/xfs_itable.c:437:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(ig1, 0, sizeof(struct xfs_inogrp)); ^~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. drivers/dma/idma64.c:406:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&idma64c->config, config, sizeof(idma64c->config)); ^~~~~~ drivers/dma/idma64.c:406:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(&idma64c->config, config, sizeof(idma64c->config)); ^~~~~~ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 36 warnings generated. drivers/dma/nbpfaxi.c:700:17: warning: Value stored to 'dev' during its = initialization is never read [clang-analyzer-deadcode.DeadStores] struct device *dev =3D dchan->device->dev; ^~~ ~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:700:17: note: Value stored to 'dev' during its ini= tialization is never read struct device *dev =3D dchan->device->dev; ^~~ ~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:833:2: warning: Access to field 'hwdesc' results i= n a dereference of a null pointer (loaded from variable 'prev') [clang-anal= yzer-core.NullDereference] prev->hwdesc->next =3D 0; ^ drivers/dma/nbpfaxi.c:1020:2: note: Taking false branch dev_dbg(dchan->device->dev, "Entry %s()\n", __func__); ^ include/linux/dev_printk.h:162:2: note: expanded from macro 'dev_dbg' if (0) \ ^ drivers/dma/nbpfaxi.c:1024:2: note: Control jumps to 'case DMA_DEV_TO_ME= M:' at line 1030 switch (direction) { ^ drivers/dma/nbpfaxi.c:1032:10: note: Calling 'nbpf_prep_sg' return nbpf_prep_sg(chan, &slave_sg, sgl, sg_len, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:932:2: note: Control jumps to 'case DMA_DEV_TO_MEM= :' at line 933 switch (direction) { ^ drivers/dma/nbpfaxi.c:937:3: note: Execution continues on line 952 break; ^ drivers/dma/nbpfaxi.c:952:9: note: Calling 'nbpf_desc_get' desc =3D nbpf_desc_get(chan, len); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:786:33: note: 'prev' initialized to a null pointer= value struct nbpf_link_desc *ldesc, *prev =3D NULL; ^~~~ drivers/dma/nbpfaxi.c:795:7: note: Assuming the condition is false if (list_empty(&chan->free)) { ^~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:795:3: note: Taking false branch if (list_empty(&chan->free)) { ^ drivers/dma/nbpfaxi.c:808:8: note: Assuming the condition is true if (list_empty(&chan->free_links)) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:808:4: note: Taking true branch if (list_empty(&chan->free_links)) { ^ drivers/dma/nbpfaxi.c:812:9: note: Assuming 'ret' is >=3D 0 if (ret < 0) { ^~~~~~~ drivers/dma/nbpfaxi.c:812:5: note: Taking false branch if (ret < 0) { ^ drivers/dma/nbpfaxi.c:817:5: note: Execution continues on line 830 continue; ^ drivers/dma/nbpfaxi.c:830:12: note: Assuming 'i' is >=3D 'len' } while (i < len); ^~~~~~~ drivers/dma/nbpfaxi.c:807:3: note: Loop condition is false. Exiting loop do { ^ drivers/dma/nbpfaxi.c:831:12: note: 'desc' is non-null } while (!desc); ^~~~ drivers/dma/nbpfaxi.c:792:2: note: Loop condition is false. Exiting loop do { ^ drivers/dma/nbpfaxi.c:833:2: note: Access to field 'hwdesc' results in a= dereference of a null pointer (loaded from variable 'prev') prev->hwdesc->next =3D 0; ^~~~ >> drivers/dma/nbpfaxi.c:1261:2: warning: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(chan->name, sizeof(chan->name), "nbpf %d", n); ^~~~~~~~ drivers/dma/nbpfaxi.c:1261:2: note: Call to function 'snprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'snprintf_s' in case of C11 snprintf(chan->name, sizeof(chan->name), "nbpf %d", n); ^~~~~~~~ drivers/dma/nbpfaxi.c:1374:15: warning: Assigned value is garbage or und= efined [clang-analyzer-core.uninitialized.Assign] chan->irq =3D irqbuf[i]; ^ ~~~~~~~~~ drivers/dma/nbpfaxi.c:1304:2: note: Taking false branch BUILD_BUG_ON(sizeof(struct nbpf_desc_page) > PAGE_SIZE); ^ include/linux/build_bug.h:50:2: note: expanded from macro 'BUILD_BUG_ON' BUILD_BUG_ON_MSG(condition, "BUILD_BUG_ON failed: " #condition) ^ include/linux/build_bug.h:39:37: note: expanded from macro 'BUILD_BUG_ON= _MSG' #define BUILD_BUG_ON_MSG(cond, msg) compiletime_assert(!(cond), msg) ^ include/linux/compiler_types.h:346:2: note: expanded from macro 'compile= time_assert' _compiletime_assert(condition, msg, __compiletime_assert_, __COU= NTER__) ^ include/linux/compiler_types.h:334:2: note: expanded from macro '_compil= etime_assert' __compiletime_assert(condition, msg, prefix, suffix) ^ include/linux/compiler_types.h:326:3: note: expanded from macro '__compi= letime_assert' if (!(condition)) \ ^ drivers/dma/nbpfaxi.c:1304:2: note: Loop condition is false. Exiting lo= op BUILD_BUG_ON(sizeof(struct nbpf_desc_page) > PAGE_SIZE); ^ include/linux/build_bug.h:50:2: note: expanded from macro 'BUILD_BUG_ON' BUILD_BUG_ON_MSG(condition, "BUILD_BUG_ON failed: " #condition) ^ include/linux/build_bug.h:39:37: note: expanded from macro 'BUILD_BUG_ON= _MSG' #define BUILD_BUG_ON_MSG(cond, msg) compiletime_assert(!(cond), msg) ^ include/linux/compiler_types.h:346:2: note: expanded from macro 'compile= time_assert' _compiletime_assert(condition, msg, __compiletime_assert_, __COU= NTER__) ^ include/linux/compiler_types.h:334:2: note: expanded from macro '_compil= etime_assert' __compiletime_assert(condition, msg, prefix, suffix) ^ include/linux/compiler_types.h:318:2: note: expanded from macro '__compi= letime_assert' do { \ ^ drivers/dma/nbpfaxi.c:1307:6: note: Assuming 'np' is non-null if (!np) ^~~ drivers/dma/nbpfaxi.c:1307:2: note: Taking false branch if (!np) ^ drivers/dma/nbpfaxi.c:1315:6: note: Assuming 'nbpf' is non-null if (!nbpf) ^~~~~ drivers/dma/nbpfaxi.c:1315:2: note: Taking false branch if (!nbpf) ^ drivers/dma/nbpfaxi.c:1323:6: note: Calling 'IS_ERR' if (IS_ERR(nbpf->base)) ^~~~~~~~~~~~~~~~~~ include/linux/err.h:36:9: note: Assuming the condition is false return IS_ERR_VALUE((unsigned long)ptr); ^ include/linux/err.h:22:34: note: expanded from macro 'IS_ERR_VALUE' #define IS_ERR_VALUE(x) unlikely((unsigned long)(void *)(x) >=3D (unsign= ed long)-MAX_ERRNO) ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~~~~~~ include/linux/compiler.h:78:42: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^ include/linux/err.h:36:2: note: Returning zero, which participates in a = condition later return IS_ERR_VALUE((unsigned long)ptr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:1323:6: note: Returning from 'IS_ERR' if (IS_ERR(nbpf->base)) ^~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:1323:2: note: Taking false branch if (IS_ERR(nbpf->base)) ^ drivers/dma/nbpfaxi.c:1327:6: note: Calling 'IS_ERR' if (IS_ERR(nbpf->clk)) ^~~~~~~~~~~~~~~~~ include/linux/err.h:36:9: note: Assuming the condition is false return IS_ERR_VALUE((unsigned long)ptr); ^ include/linux/err.h:22:34: note: expanded from macro 'IS_ERR_VALUE' #define IS_ERR_VALUE(x) unlikely((unsigned long)(void *)(x) >=3D (unsign= ed long)-MAX_ERRNO) ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~~~~~~ include/linux/compiler.h:78:42: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^ include/linux/err.h:36:2: note: Returning zero, which participates in a = condition later return IS_ERR_VALUE((unsigned long)ptr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:1327:6: note: Returning from 'IS_ERR' if (IS_ERR(nbpf->clk)) ^~~~~~~~~~~~~~~~~ drivers/dma/nbpfaxi.c:1327:2: note: Taking false branch if (IS_ERR(nbpf->clk)) ^ drivers/dma/nbpfaxi.c:1337:2: note: Loop condition is true. Entering lo= op body for (i =3D 0; irqs < ARRAY_SIZE(irqbuf); i++) { -- 33 warnings generated. crypto/ecdh.c:40:2: warning: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureA= PI.DeprecatedOrUnsafeBufferHandling] memcpy(ctx->private_key, params.key, params.key_size); ^~~~~~ crypto/ecdh.c:40:2: note: Call to function 'memcpy' is insecure as it do= es not provide security checks introduced in the C11 standard. Replace with= analogous functions that support length arguments or provides boundary che= cks such as 'memcpy_s' in case of C11 memcpy(ctx->private_key, params.key, params.key_size); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 15 warnings generated. Suppressed 15 warnings (15 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 16 warnings generated. Suppressed 16 warnings (16 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 15 warnings generated. Suppressed 15 warnings (15 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 15 warnings generated. Suppressed 15 warnings (15 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 16 warnings generated. Suppressed 16 warnings (16 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 15 warnings generated. Suppressed 15 warnings (15 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 56 warnings generated. drivers/virtio/virtio_mmio.c:168:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, &b, sizeof b); ^~~~~~ drivers/virtio/virtio_mmio.c:168:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, &b, sizeof b); ^~~~~~ drivers/virtio/virtio_mmio.c:172:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, &w, sizeof w); ^~~~~~ drivers/virtio/virtio_mmio.c:172:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, &w, sizeof w); ^~~~~~ drivers/virtio/virtio_mmio.c:176:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, &l, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:176:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, &l, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:180:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, &l, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:180:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, &l, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:182:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf + sizeof l, &l, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:182:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(buf + sizeof l, &l, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:210:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&b, buf, sizeof b); ^~~~~~ drivers/virtio/virtio_mmio.c:210:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(&b, buf, sizeof b); ^~~~~~ drivers/virtio/virtio_mmio.c:214:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&w, buf, sizeof w); ^~~~~~ drivers/virtio/virtio_mmio.c:214:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(&w, buf, sizeof w); ^~~~~~ drivers/virtio/virtio_mmio.c:218:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&l, buf, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:218:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(&l, buf, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:222:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&l, buf, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:222:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(&l, buf, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:224:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&l, buf + sizeof l, sizeof l); ^~~~~~ drivers/virtio/virtio_mmio.c:224:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(&l, buf + sizeof l, sizeof l); ^~~~~~ >> drivers/virtio/virtio_mmio.c:669:14: warning: Call to function 'sscanf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] processed =3D sscanf(str, "@%lli:%u%n:%d%n", ^~~~~~ drivers/virtio/virtio_mmio.c:669:14: note: Call to function 'sscanf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sscanf_s' in case of C11 processed =3D sscanf(str, "@%lli:%u%n:%d%n", ^~~~~~ >> drivers/virtio/virtio_mmio.c:716:2: warning: Call to function 'snprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'snprintf_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buffer + len, PAGE_SIZE - len, "0x%llx(a)0x%llx:%llu:%d= \n", ^~~~~~~~ drivers/virtio/virtio_mmio.c:716:2: note: Call to function 'snprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'snprintf_s' in case of C11 snprintf(buffer + len, PAGE_SIZE - len, "0x%llx(a)0x%llx:%llu:%d= \n", ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. fs/xfs/xfs_bmap_item.c:579:2: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buip->bui_format.bui_extents, extp, count * sizeof(*extp)= ); ^~~~~~ fs/xfs/xfs_bmap_item.c:579:2: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(buip->bui_format.bui_extents, extp, count * sizeof(*extp)= ); ^~~~~~ fs/xfs/xfs_bmap_item.c:613:3: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dst_bui_fmt, src_bui_fmt, len); ^~~~~~ fs/xfs/xfs_bmap_item.c:613:3: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(dst_bui_fmt, src_bui_fmt, len); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. fs/xfs/xfs_buf_item_recover.c:505:3: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(xfs_buf_offset(bp, ^~~~~~ fs/xfs/xfs_buf_item_recover.c:505:3: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(xfs_buf_offset(bp, ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. fs/xfs/xfs_dquot_item_recover.c:148:2: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ddq, recddq, item->ri_buf[1].i_len); ^~~~~~ fs/xfs/xfs_dquot_item_recover.c:148:2: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(ddq, recddq, item->ri_buf[1].i_len); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 13 warnings generated. lib/lz4/lz4hc_compress.c:63:2: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset((void *)hc4->hashTable, 0, sizeof(hc4->hashTable)); ^~~~~~ lib/lz4/lz4hc_compress.c:63:2: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset((void *)hc4->hashTable, 0, sizeof(hc4->hashTable)); ^~~~~~ lib/lz4/lz4hc_compress.c:64:2: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(hc4->chainTable, 0xFF, sizeof(hc4->chainTable)); ^~~~~~ lib/lz4/lz4hc_compress.c:64:2: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(hc4->chainTable, 0xFF, sizeof(hc4->chainTable)); ^~~~~~ lib/lz4/lz4hc_compress.c:573:3: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] LZ4_memcpy(op, anchor, iend - anchor); ^ lib/lz4/lz4defs.h:150:36: note: expanded from macro 'LZ4_memcpy' #define LZ4_memcpy(dst, src, size) __builtin_memcpy(dst, src, size) ^~~~~~~~~~~~~~~~ lib/lz4/lz4hc_compress.c:573:3: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 LZ4_memcpy(op, anchor, iend - anchor); ^ lib/lz4/lz4defs.h:150:36: note: expanded from macro 'LZ4_memcpy' #define LZ4_memcpy(dst, src, size) __builtin_memcpy(dst, src, size) ^~~~~~~~~~~~~~~~ lib/lz4/lz4hc_compress.c:750:2: warning: Call to function 'memmove' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memmove_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(safeBuffer, streamPtr->end - dictSize, dictSize); ^~~~~~~ lib/lz4/lz4hc_compress.c:750:2: note: Call to function 'memmove' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memmove_s' in case of C11 memmove(safeBuffer, streamPtr->end - dictSize, dictSize); ^~~~~~~ Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 20 warnings generated. lib/lz4/lz4_decompress.c:156:4: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] LZ4_memcpy(op, ip, endOnInput ? 16 : 8); ^ lib/lz4/lz4defs.h:150:36: note: expanded from macro 'LZ4_memcpy' #define LZ4_memcpy(dst, src, size) __builtin_memcpy(dst, src, size) ^~~~~~~~~~~~~~~~ lib/lz4/lz4_decompress.c:156:4: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 LZ4_memcpy(op, ip, endOnInput ? 16 : 8); ^ lib/lz4/lz4defs.h:150:36: note: expanded from macro 'LZ4_memcpy' #define LZ4_memcpy(dst, src, size) __builtin_memcpy(dst, src, size) ^~~~~~~~~~~~~~~~ lib/lz4/lz4_decompress.c:175:5: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] LZ4_memcpy(op + 0, match + 0, 8); ^ lib/lz4/lz4defs.h:150:36: note: expanded from macro 'LZ4_memcpy' #define LZ4_memcpy(dst, src, size) __builtin_memcpy(dst, src, size) ^~~~~~~~~~~~~~~~ lib/lz4/lz4_decompress.c:175:5: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 LZ4_memcpy(op + 0, match + 0, 8); ^ lib/lz4/lz4defs.h:150:36: note: expanded from macro 'LZ4_memcpy' #define LZ4_memcpy(dst, src, size) __builtin_memcpy(dst, src, size) -- ^ include/linux/err.h:22:34: note: expanded from macro 'IS_ERR_VALUE' #define IS_ERR_VALUE(x) unlikely((unsigned long)(void *)(x) >=3D (unsign= ed long)-MAX_ERRNO) ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~~~~~~ include/linux/compiler.h:78:42: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^ include/linux/err.h:36:2: note: Returning zero, which participates in a = condition later return IS_ERR_VALUE((unsigned long)ptr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mfd/as3711.c:149:6: note: Returning from 'IS_ERR' if (IS_ERR(as3711->regmap)) { ^~~~~~~~~~~~~~~~~~~~~~ drivers/mfd/as3711.c:149:2: note: Taking false branch if (IS_ERR(as3711->regmap)) { ^ drivers/mfd/as3711.c:157:6: note: Assuming 'ret' is not equal to 0 if (!ret) ^~~~ drivers/mfd/as3711.c:157:2: note: Taking false branch if (!ret) ^ drivers/mfd/as3711.c:159:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) { ^~~~~~~ drivers/mfd/as3711.c:159:2: note: Taking false branch if (ret < 0) { ^ drivers/mfd/as3711.c:163:6: note: Assuming 'id1' is equal to 139 if (id1 !=3D 0x8b) ^~~~~~~~~~~ drivers/mfd/as3711.c:163:2: note: Taking false branch if (id1 !=3D 0x8b) ^ drivers/mfd/as3711.c:165:2: note: Loop condition is false. Exiting loop dev_info(as3711->dev, "AS3711 detected: %x:%x\n", id1, id2); ^ include/linux/dev_printk.h:150:2: note: expanded from macro 'dev_info' dev_printk_index_wrap(_dev_info, KERN_INFO, dev, dev_fmt(fmt), #= #__VA_ARGS__) ^ include/linux/dev_printk.h:109:3: note: expanded from macro 'dev_printk_= index_wrap' dev_printk_index_emit(level, fmt); \ ^ include/linux/dev_printk.h:105:2: note: expanded from macro 'dev_printk_= index_emit' printk_index_subsys_emit("%s %s: ", level, fmt) ^ include/linux/printk.h:413:2: note: expanded from macro 'printk_index_su= bsys_emit' __printk_index_emit(fmt, level, subsys_fmt_prefix) ^ include/linux/printk.h:392:34: note: expanded from macro '__printk_index= _emit' #define __printk_index_emit(...) do {} while (0) ^ drivers/mfd/as3711.c:165:2: note: 4th function call argument is an unini= tialized value dev_info(as3711->dev, "AS3711 detected: %x:%x\n", id1, id2); ^ include/linux/dev_printk.h:150:24: note: expanded from macro 'dev_info' dev_printk_index_wrap(_dev_info, KERN_INFO, dev, dev_fmt(fmt), #= #__VA_ARGS__) ^ = ~~~~~~~~~~~ include/linux/dev_printk.h:110:3: note: expanded from macro 'dev_printk_= index_wrap' _p_func(dev, fmt, ##__VA_ARGS__); \ ^ ~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 22 warnings generated. drivers/char/hw_random/cctrng.c:136:17: warning: Value stored to 'dev' d= uring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct device *dev =3D &(drvdata->pdev->dev); ^~~ ~~~~~~~~~~~~~~~~~~~~~ drivers/char/hw_random/cctrng.c:136:17: note: Value stored to 'dev' duri= ng its initialization is never read struct device *dev =3D &(drvdata->pdev->dev); ^~~ ~~~~~~~~~~~~~~~~~~~~~ drivers/char/hw_random/cctrng.c:165:17: warning: Value stored to 'dev' d= uring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct device *dev =3D &(drvdata->pdev->dev); ^~~ ~~~~~~~~~~~~~~~~~~~~~ drivers/char/hw_random/cctrng.c:165:17: note: Value stored to 'dev' duri= ng its initialization is never read struct device *dev =3D &(drvdata->pdev->dev); ^~~ ~~~~~~~~~~~~~~~~~~~~~ drivers/char/hw_random/cctrng.c:232:2: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data, &(buf[drvdata->circ.tail]), size); ^~~~~~ drivers/char/hw_random/cctrng.c:232:2: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(data, &(buf[drvdata->circ.tail]), size); ^~~~~~ drivers/char/hw_random/cctrng.c:241:3: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data, &(buf[drvdata->circ.tail]), size); ^~~~~~ drivers/char/hw_random/cctrng.c:241:3: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(data, &(buf[drvdata->circ.tail]), size); ^~~~~~ drivers/char/hw_random/cctrng.c:278:17: warning: Value stored to 'dev' d= uring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct device *dev =3D &(drvdata->pdev->dev); ^~~ ~~~~~~~~~~~~~~~~~~~~~ drivers/char/hw_random/cctrng.c:278:17: note: Value stored to 'dev' duri= ng its initialization is never read struct device *dev =3D &(drvdata->pdev->dev); ^~~ ~~~~~~~~~~~~~~~~~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 78 warnings generated. >> drivers/char/pcmcia/synclink_cs.c:537:2: warning: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&info->params,&default_params,sizeof(MGSL_PARAMS)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:537:2: note: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&info->params,&default_params,sizeof(MGSL_PARAMS)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:867:16: warning: Assigned value is gar= bage or undefined [clang-analyzer-core.uninitialized.Assign] buf->status =3D data[--read_count]; ^ drivers/char/pcmcia/synclink_cs.c:1163:6: note: Assuming 'debug_level' i= s < DEBUG_LEVEL_ISR if (debug_level >=3D DEBUG_LEVEL_ISR) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1163:2: note: Taking false branch if (debug_level >=3D DEBUG_LEVEL_ISR) ^ drivers/char/pcmcia/synclink_cs.c:1166:6: note: Assuming field '_locked'= is not equal to 0 if (!(info->p_dev->_locked)) ^~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1166:2: note: Taking false branch if (!(info->p_dev->_locked)) ^ drivers/char/pcmcia/synclink_cs.c:1173:16: note: Loop condition is false= . Exiting loop while ((gis =3D read_reg(info, CHA + GIS))) { ^ drivers/char/pcmcia/synclink_cs.c:322:29: note: expanded from macro 'rea= d_reg' #define read_reg(info, reg) inb((info)->io_base + (reg)) ^ arch/arm/include/asm/io.h:262:52: note: expanded from macro 'inb' #define inb(p) ({ __u8 __v =3D __raw_readb(__io(p)); __iormb(); __v; }) ^ arch/arm/include/asm/io.h:169:20: note: expanded from macro '__iormb' #define __iormb() do { } while (0) ^ drivers/char/pcmcia/synclink_cs.c:1173:2: note: Loop condition is true. = Entering loop body while ((gis =3D read_reg(info, CHA + GIS))) { ^ drivers/char/pcmcia/synclink_cs.c:1174:7: note: Assuming 'debug_level' i= s < DEBUG_LEVEL_ISR if (debug_level >=3D DEBUG_LEVEL_ISR) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1174:3: note: Taking false branch if (debug_level >=3D DEBUG_LEVEL_ISR) ^ drivers/char/pcmcia/synclink_cs.c:1177:8: note: Assuming the condition i= s false if ((gis & 0x70) || count > 1000) { ^~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1177:7: note: Left side of '||' is fal= se if ((gis & 0x70) || count > 1000) { ^ drivers/char/pcmcia/synclink_cs.c:1177:23: note: 'count' is <=3D 1000 if ((gis & 0x70) || count > 1000) { ^~~~~ drivers/char/pcmcia/synclink_cs.c:1177:3: note: Taking false branch if ((gis & 0x70) || count > 1000) { ^ drivers/char/pcmcia/synclink_cs.c:1183:7: note: Assuming the condition i= s false if (gis & (BIT1 | BIT0)) { ^~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1183:3: note: Taking false branch if (gis & (BIT1 | BIT0)) { ^ drivers/char/pcmcia/synclink_cs.c:1190:7: note: Assuming the condition i= s true if (gis & (BIT3 | BIT2)) ^~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1190:3: note: Taking true branch if (gis & (BIT3 | BIT2)) ^ drivers/char/pcmcia/synclink_cs.c:1192:10: note: Loop condition is false= . Exiting loop isr =3D read_reg16(info, CHA + ISR); ^ drivers/char/pcmcia/synclink_cs.c:324:31: note: expanded from macro 'rea= d_reg16' #define read_reg16(info, reg) inw((info)->io_base + (reg)) ^ arch/arm/include/asm/io.h:264:27: note: expanded from macro 'inw' __raw_readw(__io(p))); __iormb(); __v; }) ^ arch/arm/include/asm/io.h:169:20: note: expanded from macro '__iormb' #define __iormb() do { } while (0) ^ drivers/char/pcmcia/synclink_cs.c:1193:8: note: Assuming the condition i= s false if (isr & IRQ_TIMER) { ^~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1193:4: note: Taking false branch if (isr & IRQ_TIMER) { ^ drivers/char/pcmcia/synclink_cs.c:1199:8: note: Assuming the condition i= s false if (isr & IRQ_EXITHUNT) { ^~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1199:4: note: Taking false branch if (isr & IRQ_EXITHUNT) { ^ drivers/char/pcmcia/synclink_cs.c:1203:8: note: Assuming the condition i= s false if (isr & IRQ_BREAK_ON) { ^~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1203:4: note: Taking false branch if (isr & IRQ_BREAK_ON) { ^ drivers/char/pcmcia/synclink_cs.c:1208:4: note: Taking false branch if (isr & IRQ_RXTIME) { ^ drivers/char/pcmcia/synclink_cs.c:1211:8: note: Assuming the condition i= s true if (isr & (IRQ_RXEOM | IRQ_RXFIFO)) { -- ^~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1199:4: note: Taking false branch if (isr & IRQ_EXITHUNT) { ^ drivers/char/pcmcia/synclink_cs.c:1203:8: note: Assuming the condition i= s false if (isr & IRQ_BREAK_ON) { ^~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1203:4: note: Taking false branch if (isr & IRQ_BREAK_ON) { ^ drivers/char/pcmcia/synclink_cs.c:1208:4: note: Taking false branch if (isr & IRQ_RXTIME) { ^ drivers/char/pcmcia/synclink_cs.c:1211:8: note: Assuming the condition i= s true if (isr & (IRQ_RXEOM | IRQ_RXFIFO)) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1211:4: note: Taking true branch if (isr & (IRQ_RXEOM | IRQ_RXFIFO)) { ^ drivers/char/pcmcia/synclink_cs.c:1212:9: note: Assuming field 'mode' is= equal to MGSL_MODE_HDLC if (info->params.mode =3D=3D MGSL_MODE_H= DLC) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:1212:5: note: Taking true branch if (info->params.mode =3D=3D MGSL_MODE_H= DLC) ^ drivers/char/pcmcia/synclink_cs.c:1213:6: note: Calling 'rx_ready_hdlc' rx_ready_hdlc(info, isr & IRQ_RX= EOM); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/char/pcmcia/synclink_cs.c:834:6: note: 'debug_level' is < DEBUG_= LEVEL_ISR if (debug_level >=3D DEBUG_LEVEL_ISR) ^~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:834:2: note: Taking false branch if (debug_level >=3D DEBUG_LEVEL_ISR) ^ drivers/char/pcmcia/synclink_cs.c:837:6: note: Assuming field 'rx_enable= d' is true if (!info->rx_enabled) ^~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:837:2: note: Taking false branch if (!info->rx_enabled) ^ drivers/char/pcmcia/synclink_cs.c:840:6: note: Assuming field 'rx_frame_= count' is < field 'rx_buf_count' if (info->rx_frame_count >=3D info->rx_buf_count) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:840:2: note: Taking false branch if (info->rx_frame_count >=3D info->rx_buf_count) { ^ drivers/char/pcmcia/synclink_cs.c:849:6: note: Assuming 'eom' is 0 if (eom) { ^~~ drivers/char/pcmcia/synclink_cs.c:849:2: note: Taking false branch if (eom) { ^ drivers/char/pcmcia/synclink_cs.c:858:7: note: 'fifo_count' is not equal= to 1 if (fifo_count =3D=3D 1) { ^~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:858:3: note: Taking false branch if (fifo_count =3D=3D 1) { ^ drivers/char/pcmcia/synclink_cs.c:863:33: note: Loop condition is false.= Exiting loop *((unsigned short *) data) =3D read_reg16(info, = CHA + RXFIFO); ^ drivers/char/pcmcia/synclink_cs.c:324:31: note: expanded from macro 'rea= d_reg16' #define read_reg16(info, reg) inw((info)->io_base + (reg)) ^ arch/arm/include/asm/io.h:264:27: note: expanded from macro 'inw' __raw_readw(__io(p))); __iormb(); __v; }) ^ arch/arm/include/asm/io.h:169:20: note: expanded from macro '__iormb' #define __iormb() do { } while (0) ^ drivers/char/pcmcia/synclink_cs.c:866:8: note: 'fifo_count' is 30 if (!fifo_count && eom) ^~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:866:19: note: Left side of '&&' is fal= se if (!fifo_count && eom) ^ drivers/char/pcmcia/synclink_cs.c:869:3: note: Loop condition is true. = Entering loop body for (i =3D 0; i < read_count; i++) { ^ drivers/char/pcmcia/synclink_cs.c:870:8: note: Assuming field 'count' is= < field 'max_frame_size' if (buf->count >=3D info->max_frame_size) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:870:4: note: Taking false branch if (buf->count >=3D info->max_frame_size) { ^ drivers/char/pcmcia/synclink_cs.c:869:31: note: The value 1 is assigned = to 'i' for (i =3D 0; i < read_count; i++) { ^~~ drivers/char/pcmcia/synclink_cs.c:869:3: note: Loop condition is true. = Entering loop body for (i =3D 0; i < read_count; i++) { ^ drivers/char/pcmcia/synclink_cs.c:870:8: note: Assuming field 'count' is= < field 'max_frame_size' if (buf->count >=3D info->max_frame_size) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/char/pcmcia/synclink_cs.c:870:4: note: Taking false branch if (buf->count >=3D info->max_frame_size) { ^ drivers/char/pcmcia/synclink_cs.c:876:30: note: Assigned value is garbag= e or undefined *(buf->data + buf->count) =3D data[i]; ^ ~~~~~~~ >> drivers/char/pcmcia/synclink_cs.c:1288:2: warning: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&info->icount, 0, sizeof(info->icount)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:1288:2: note: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 memset(&info->icount, 0, sizeof(info->icount)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:1579:3: warning: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(info->tx_buf + info->tx_put, buf, c); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:1579:3: note: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 memcpy(info->tx_buf + info->tx_put, buf, c); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:1766:3: warning: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&info->icount, 0, sizeof(info->icount)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:1766:3: note: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 memset(&info->icount, 0, sizeof(info->icount)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:1815:2: warning: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&info->params,&tmp_params,sizeof(MGSL_PARAMS)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:1815:2: note: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&info->params,&tmp_params,sizeof(MGSL_PARAMS)); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2544:3: warning: Call to function 'str= cat' is insecure as it does not provide bounding of the memory buffer. Repl= ace unbounded copy functions with analogous functions that support length a= rguments such as 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.st= rcpy] strcat(stat_buf, "|RTS"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2544:3: note: Call to function 'strcat= ' is insecure as it does not provide bounding of the memory buffer. Replace= unbounded copy functions with analogous functions that support length argu= ments such as 'strlcat'. CWE-119 strcat(stat_buf, "|RTS"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2546:3: warning: Call to function 'str= cat' is insecure as it does not provide bounding of the memory buffer. Repl= ace unbounded copy functions with analogous functions that support length a= rguments such as 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.st= rcpy] strcat(stat_buf, "|CTS"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2546:3: note: Call to function 'strcat= ' is insecure as it does not provide bounding of the memory buffer. Replace= unbounded copy functions with analogous functions that support length argu= ments such as 'strlcat'. CWE-119 strcat(stat_buf, "|CTS"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2548:3: warning: Call to function 'str= cat' is insecure as it does not provide bounding of the memory buffer. Repl= ace unbounded copy functions with analogous functions that support length a= rguments such as 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.st= rcpy] strcat(stat_buf, "|DTR"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2548:3: note: Call to function 'strcat= ' is insecure as it does not provide bounding of the memory buffer. Replace= unbounded copy functions with analogous functions that support length argu= ments such as 'strlcat'. CWE-119 strcat(stat_buf, "|DTR"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2550:3: warning: Call to function 'str= cat' is insecure as it does not provide bounding of the memory buffer. Repl= ace unbounded copy functions with analogous functions that support length a= rguments such as 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.st= rcpy] strcat(stat_buf, "|DSR"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2550:3: note: Call to function 'strcat= ' is insecure as it does not provide bounding of the memory buffer. Replace= unbounded copy functions with analogous functions that support length argu= ments such as 'strlcat'. CWE-119 strcat(stat_buf, "|DSR"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2552:3: warning: Call to function 'str= cat' is insecure as it does not provide bounding of the memory buffer. Repl= ace unbounded copy functions with analogous functions that support length a= rguments such as 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.st= rcpy] strcat(stat_buf, "|CD"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2552:3: note: Call to function 'strcat= ' is insecure as it does not provide bounding of the memory buffer. Replace= unbounded copy functions with analogous functions that support length argu= ments such as 'strlcat'. CWE-119 strcat(stat_buf, "|CD"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2554:3: warning: Call to function 'str= cat' is insecure as it does not provide bounding of the memory buffer. Repl= ace unbounded copy functions with analogous functions that support length a= rguments such as 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.st= rcpy] strcat(stat_buf, "|RI"); ^~~~~~ drivers/char/pcmcia/synclink_cs.c:2554:3: note: Call to function 'strcat= ' is insecure as it does not provide bounding of the memory buffer. Replace= unbounded copy functions with analogous functions that support length argu= ments such as 'strlcat'. CWE-119 strcat(stat_buf, "|RI"); ^~~~~~ >> drivers/char/pcmcia/synclink_cs.c:2677:2: warning: Call to function 'spr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'sprintf_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(info->device_name,"ttySLP%d",info->line); ^~~~~~~ drivers/char/pcmcia/synclink_cs.c:2677:2: note: Call to function 'sprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'sprintf_s' in case of C11 sprintf(info->device_name,"ttySLP%d",info->line); ^~~~~~~ Suppressed 64 warnings (64 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/regulator/mc13892-regulator.c:583:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&mc13892_vcam_ops, mc13892_regulators[MC13892_VCAM].desc.= ops, ^~~~~~ drivers/regulator/mc13892-regulator.c:583:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&mc13892_vcam_ops, mc13892_regulators[MC13892_VCAM].desc.= ops, ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/regulator/mp886x.c:134:6: warning: Assigned value is garbage or = undefined [clang-analyzer-core.uninitialized.Assign] val >>=3D ffs(rdev->desc->vsel_mask) - 1; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/regulator/mp886x.c:123:6: note: Assuming 'ret' is 0 if (ret) ^~~ drivers/regulator/mp886x.c:123:2: note: Taking false branch if (ret) ^ drivers/regulator/mp886x.c:127:6: note: Assuming 'fbloop' is false if (fbloop) { ^~~~~~ drivers/regulator/mp886x.c:127:2: note: Taking false branch if (fbloop) { ^ drivers/regulator/mp886x.c:134:6: note: Assigned value is garbage or und= efined val >>=3D ffs(rdev->desc->vsel_mask) - 1; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/regulator/mp886x.c:207:6: warning: Assigned value is garbage or = undefined [clang-analyzer-core.uninitialized.Assign] val >>=3D ffs(rdev->desc->vsel_mask) - 1; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/regulator/mp886x.c:201:6: note: Assuming 'ret' is 0 if (ret) ^~~ drivers/regulator/mp886x.c:201:2: note: Taking false branch if (ret) ^ drivers/regulator/mp886x.c:207:6: note: Assigned value is garbage or und= efined val >>=3D ffs(rdev->desc->vsel_mask) - 1; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. fs/fs-writeback.c:148:3: warning: Argument to kfree() is the address of = the local variable 'work', which is not memory allocated by malloc() [clang= -analyzer-unix.Malloc] kfree(work); ^ fs/fs-writeback.c:2702:6: note: Assuming the condition is false if (bdi =3D=3D &noop_backing_dev_info) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/fs-writeback.c:2702:2: note: Taking false branch if (bdi =3D=3D &noop_backing_dev_info) ^ fs/fs-writeback.c:2704:2: note: Taking false branch WARN_ON(!rwsem_is_locked(&sb->s_umount)); ^ include/asm-generic/bug.h:122:2: note: expanded from macro 'WARN_ON' if (unlikely(__ret_warn_on)) \ ^ fs/fs-writeback.c:2708:2: note: Calling 'bdi_split_work_to_wbs' bdi_split_work_to_wbs(bdi, &work, false); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/fs-writeback.c:1204:2: note: Loop condition is false. Exiting loop might_sleep(); ^ include/linux/kernel.h:180:29: note: expanded from macro 'might_sleep' # define might_sleep() do { might_resched(); } while (0) ^ include/linux/kernel.h:115:26: note: expanded from macro 'might_resched' # define might_resched() do { } while (0) ^ fs/fs-writeback.c:1204:2: note: Loop condition is false. Exiting loop might_sleep(); ^ include/linux/kernel.h:180:24: note: expanded from macro 'might_sleep' # define might_sleep() do { might_resched(); } while (0) ^ fs/fs-writeback.c:1206:7: note: 'skip_if_busy' is false if (!skip_if_busy || !writeback_in_progress(&bdi->wb)) { ^~~~~~~~~~~~ fs/fs-writeback.c:1206:20: note: Left side of '||' is true if (!skip_if_busy || !writeback_in_progress(&bdi->wb)) { -- ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:23:2: note: Taking false branch if (!(x & 0xff000000u)) { ^ include/asm-generic/bitops/fls.h:27:6: note: Assuming the condition is f= alse if (!(x & 0xf0000000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:27:2: note: Taking false branch if (!(x & 0xf0000000u)) { ^ include/asm-generic/bitops/fls.h:31:6: note: Assuming the condition is f= alse if (!(x & 0xc0000000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:31:2: note: Taking false branch if (!(x & 0xc0000000u)) { ^ include/asm-generic/bitops/fls.h:35:6: note: Assuming the condition is f= alse if (!(x & 0x80000000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:35:2: note: Taking false branch if (!(x & 0x80000000u)) { ^ include/asm-generic/bitops/fls.h:39:2: note: Returning the value 32 (loa= ded from 'r') return r; ^~~~~~~~ include/linux/bitops.h:155:10: note: Returning from 'fls' return fls(l); ^~~~~~ include/linux/bitops.h:155:3: note: Returning the value 32 return fls(l); ^~~~~~~~~~~~~ include/linux/log2.h:57:16: note: Returning from 'fls_long' return 1UL << fls_long(n - 1); ^~~~~~~~~~~~~~~ include/linux/log2.h:57:13: note: The result of the left shift is undefi= ned due to shifting by '32', which is greater or equal to the width of type= 'unsigned long' return 1UL << fls_long(n - 1); ^ ~~~~~~~~~~~~~~~ lib/rhashtable.c:792:21: warning: Value stored to 'p' during its initial= ization is never read [clang-analyzer-deadcode.DeadStores] struct rhash_head *p =3D iter->p; ^ ~~~~~~~ lib/rhashtable.c:792:21: note: Value stored to 'p' during its initializa= tion is never read struct rhash_head *p =3D iter->p; ^ ~~~~~~~ lib/rhashtable.c:1025:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(ht, 0, sizeof(*ht)); ^~~~~~ lib/rhashtable.c:1025:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(ht, 0, sizeof(*ht)); ^~~~~~ lib/rhashtable.c:1028:2: warning: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&ht->p, params, sizeof(*params)); ^~~~~~ lib/rhashtable.c:1028:2: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(&ht->p, params, sizeof(*params)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. drivers/dma/sh/shdma-base.c:334:2: warning: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cb, 0, sizeof(cb)); ^~~~~~ drivers/dma/sh/shdma-base.c:334:2: note: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 memset(&cb, 0, sizeof(cb)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. drivers/tty/serial/8250/8250_tegra.c:54:2: warning: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&port8250, 0, sizeof(port8250)); ^~~~~~ drivers/tty/serial/8250/8250_tegra.c:54:2: note: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 memset(&port8250, 0, sizeof(port8250)); ^~~~~~ Suppressed 33 warnings (32 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. drivers/tty/serial/8250/8250_of.c:41:2: warning: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(port, 0, sizeof *port); ^~~~~~ drivers/tty/serial/8250/8250_of.c:41:2: note: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 memset(port, 0, sizeof *port); ^~~~~~ drivers/tty/serial/8250/8250_of.c:219:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&port8250, 0, sizeof(port8250)); ^~~~~~ drivers/tty/serial/8250/8250_of.c:219:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(&port8250, 0, sizeof(port8250)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 51 warnings generated. >> drivers/tty/serial/amba-pl011.c:599:3: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dmatx->buf[0], &xmit->buf[xmit->tail], count); ^~~~~~ drivers/tty/serial/amba-pl011.c:599:3: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dmatx->buf[0], &xmit->buf[xmit->tail], count); ^~~~~~ drivers/tty/serial/amba-pl011.c:608:3: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dmatx->buf[0], &xmit->buf[xmit->tail], first); ^~~~~~ drivers/tty/serial/amba-pl011.c:608:3: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dmatx->buf[0], &xmit->buf[xmit->tail], first); ^~~~~~ drivers/tty/serial/amba-pl011.c:610:4: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dmatx->buf[first], &xmit->buf[0], second= ); ^~~~~~ drivers/tty/serial/amba-pl011.c:610:4: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dmatx->buf[first], &xmit->buf[0], second= ); ^~~~~~ drivers/tty/serial/amba-pl011.c:908:3: warning: Value stored to 'fifotak= en' is never read [clang-analyzer-deadcode.DeadStores] fifotaken =3D pl011_fifo_to_tty(uap); ^ ~~~~~~~~~~~~~~~~~~~~~~ drivers/tty/serial/amba-pl011.c:908:3: note: Value stored to 'fifotaken'= is never read fifotaken =3D pl011_fifo_to_tty(uap); ^ ~~~~~~~~~~~~~~~~~~~~~~ >> drivers/tty/serial/amba-pl011.c:2182:2: warning: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(rs485->padding, 0, sizeof(rs485->padding)); ^~~~~~ drivers/tty/serial/amba-pl011.c:2182:2: note: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 memset(rs485->padding, 0, sizeof(rs485->padding)); ^~~~~~ >> drivers/tty/serial/amba-pl011.c:2761:2: warning: Call to function 'snpri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'snprintf_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(uap->type, sizeof(uap->type), "PL011 rev%u", amba_rev(d= ev)); ^~~~~~~~ drivers/tty/serial/amba-pl011.c:2761:2: note: Call to function 'snprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'snprintf_s' in case of C11 snprintf(uap->type, sizeof(uap->type), "PL011 rev%u", amba_rev(d= ev)); ^~~~~~~~ drivers/tty/serial/amba-pl011.c:2853:2: warning: Call to function 'snpri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'snprintf_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(uap->type, sizeof(uap->type), "SBSA"); ^~~~~~~~ drivers/tty/serial/amba-pl011.c:2853:2: note: Call to function 'snprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'snprintf_s' in case of C11 snprintf(uap->type, sizeof(uap->type), "SBSA"); ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. block/bfq-iosched.c:7185:9: warning: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(page, "%u\n", var); ^~~~~~~ block/bfq-iosched.c:7185:9: note: Call to function 'sprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'sprintf_s' in case of C11 return sprintf(page, "%u\n", var); ^~~~~~~ Suppressed 49 warnings (49 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. block/bfq-wf2q.c:263:7: warning: Access to field 'my_sched_data' results= in a dereference of a null pointer (loaded from variable 'entity') [clang-= analyzer-core.NullDereference] if (!entity->my_sched_data) ^ block/bfq-wf2q.c:1508:2: note: 'entity' initialized to a null pointer va= lue struct bfq_entity *entity =3D NULL; ^~~~~~~~~~~~~~~~~~~~~~~~~ block/bfq-wf2q.c:1512:6: note: Assuming the condition is false if (bfq_tot_busy_queues(bfqd) =3D=3D 0) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ block/bfq-wf2q.c:1512:2: note: Taking false branch if (bfq_tot_busy_queues(bfqd) =3D=3D 0) ^ block/bfq-wf2q.c:1521:2: note: Loop condition is false. Execution contin= ues on line 1582 for (; sd ; sd =3D entity->my_sched_data) { ^ block/bfq-wf2q.c:1582:28: note: Passing null pointer value via 1st param= eter 'entity' bfqq =3D bfq_entity_to_bfqq(entity); ^~~~~~ block/bfq-wf2q.c:1582:9: note: Calling 'bfq_entity_to_bfqq' bfqq =3D bfq_entity_to_bfqq(entity); ^~~~~~~~~~~~~~~~~~~~~~~~~~ block/bfq-wf2q.c:263:7: note: Access to field 'my_sched_data' results in= a dereference of a null pointer (loaded from variable 'entity') if (!entity->my_sched_data) ^~~~~~ Suppressed 49 warnings (49 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. Suppressed 50 warnings (49 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/virtio/virtio_balloon.c:266:2: warning: Assigned value is garbag= e or undefined [clang-analyzer-core.uninitialized.Assign] list_for_each_entry_safe(page, next, pages, lru) { ^ include/linux/list.h:726:7: note: expanded from macro 'list_for_each_ent= ry_safe' n =3D list_next_entry(pos, member); = \ ^ include/linux/list.h:564:2: note: expanded from macro 'list_next_entry' list_entry((pos)->member.next, typeof(*(pos)), member) ^ include/linux/list.h:520:2: note: expanded from macro 'list_entry' container_of(ptr, type, member) ^ include/linux/container_of.h:18:2: note: expanded from macro 'container_= of' void *__mptr =3D (void *)(ptr); = \ ^ drivers/virtio/virtio_balloon.c:1104:2: note: Calling 'remove_common' remove_common(vb); ^~~~~~~~~~~~~~~~~ drivers/virtio/virtio_balloon.c:1050:2: note: Loop condition is true. E= ntering loop body while (vb->num_pages) ^ drivers/virtio/virtio_balloon.c:1051:3: note: Calling 'leak_balloon' leak_balloon(vb, vb->num_pages); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/virtio/virtio_balloon.c:283:8: note: Assuming '__UNIQUE_ID___x27= 3' is >=3D '__UNIQUE_ID___y274' num =3D min(num, ARRAY_SIZE(vb->pfns)); ^ include/linux/minmax.h:45:19: note: expanded from macro 'min' #define min(x, y) __careful_cmp(x, y, <) ^~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:28:26: note: expanded from macro '__cmp' #define __cmp(x, y, op) ((x) op (y) ? (x) : (y)) ^~~~~~~~~~ drivers/virtio/virtio_balloon.c:283:8: note: '?' condition is false num =3D min(num, ARRAY_SIZE(vb->pfns)); ^ include/linux/minmax.h:45:19: note: expanded from macro 'min' #define min(x, y) __careful_cmp(x, y, <) ^ include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) ^ include/linux/minmax.h:28:26: note: expanded from macro '__cmp' #define __cmp(x, y, op) ((x) op (y) ? (x) : (y)) ^ drivers/virtio/virtio_balloon.c:287:8: note: Assuming '__UNIQUE_ID___x27= 5' is >=3D '__UNIQUE_ID___y276' num =3D min(num, (size_t)vb->num_pages); ^ include/linux/minmax.h:45:19: note: expanded from macro 'min' #define min(x, y) __careful_cmp(x, y, <) ^~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:28:26: note: expanded from macro '__cmp' #define __cmp(x, y, op) ((x) op (y) ? (x) : (y)) ^~~~~~~~~~ drivers/virtio/virtio_balloon.c:287:8: note: '?' condition is false num =3D min(num, (size_t)vb->num_pages); ^ include/linux/minmax.h:45:19: note: expanded from macro 'min' #define min(x, y) __careful_cmp(x, y, <) ^ include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) ^ include/linux/minmax.h:28:26: note: expanded from macro '__cmp' #define __cmp(x, y, op) ((x) op (y) ? (x) : (y)) ^ drivers/virtio/virtio_balloon.c:288:25: note: Assuming 'num' is <=3D fie= ld 'num_pfns' for (vb->num_pfns =3D 0; vb->num_pfns < num; ^~~~~~~~~~~~~~~~~~ drivers/virtio/virtio_balloon.c:288:2: note: Loop condition is false. Ex= ecution continues on line 298 for (vb->num_pfns =3D 0; vb->num_pfns < num; ^ drivers/virtio/virtio_balloon.c:304:10: note: Field 'num_pfns' is equal = to 0 if (vb->num_pfns !=3D 0) ^ drivers/virtio/virtio_balloon.c:304:2: note: Taking false branch if (vb->num_pfns !=3D 0) ^ drivers/virtio/virtio_balloon.c:306:2: note: Calling 'release_pages_ball= oon' release_pages_balloon(vb, &pages); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/virtio/virtio_balloon.c:266:2: note: Assigned value is garbage o= r undefined list_for_each_entry_safe(page, next, pages, lru) { ^ include/linux/list.h:726:7: note: expanded from macro 'list_for_each_ent= ry_safe' n =3D list_next_entry(pos, member); = \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:564:2: note: expanded from macro 'list_next_entry' list_entry((pos)->member.next, typeof(*(pos)), member) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:520:2: note: expanded from macro 'list_entry' container_of(ptr, type, member) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/container_of.h:18:2: note: expanded from macro 'container_= of' void *__mptr =3D (void *)(ptr); = \ ^ ~~~~~~~~~~~~~ >> drivers/virtio/virtio_balloon.c:980:4: warning: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&poison_val, PAGE_POISON, sizeof(poison_v= al)); ^~~~~~ drivers/virtio/virtio_balloon.c:980:4: note: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 memset(&poison_val, PAGE_POISON, sizeof(poison_v= al)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 52 warnings generated. arch/arm/include/asm/uaccess.h:580:2: warning: Null pointer passed as 1s= t argument to memory copy function [clang-analyzer-unix.cstring.NullArg] memcpy(to, (const void __force *)from, n); ^ drivers/mtd/mtdchar.c:697:2: note: Taking false branch pr_debug("MTD_ioctl\n"); ^ include/linux/printk.h:576:2: note: expanded from macro 'pr_debug' no_printk(KERN_DEBUG pr_fmt(fmt), ##__VA_ARGS__) ^ include/linux/printk.h:131:2: note: expanded from macro 'no_printk' if (0) \ ^ drivers/mtd/mtdchar.c:703:2: note: Control jumps to 'case 3224390936:' = at line 731 switch (cmd) { ^ drivers/mtd/mtdchar.c:734:7: note: Assuming the condition is false if (!(file->f_mode & FMODE_WRITE)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/mtdchar.c:734:3: note: Taking false branch if (!(file->f_mode & FMODE_WRITE)) ^ drivers/mtd/mtdchar.c:736:3: note: Execution continues on line 742 break; ^ drivers/mtd/mtdchar.c:742:2: note: Control jumps to 'case 3224390936:' = at line 877 switch (cmd) { ^ drivers/mtd/mtdchar.c:879:9: note: Calling 'mtdchar_write_ioctl' ret =3D mtdchar_write_ioctl(mtd, ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/mtdchar.c:599:11: note: 'datbuf' initialized to a null point= er value uint8_t *datbuf =3D NULL, *oobbuf =3D NULL; ^~~~~~ drivers/mtd/mtdchar.c:603:6: note: Calling 'copy_from_user' if (copy_from_user(&req, argp, sizeof(req))) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/uaccess.h:191:2: note: Taking true branch if (likely(check_copy_size(to, n, false))) ^ include/linux/uaccess.h:192:7: note: Calling '_copy_from_user' n =3D _copy_from_user(to, from, n); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/uaccess.h:157:6: note: Assuming the condition is true if (!should_fail_usercopy() && likely(access_ok(from, n))) { ^~~~~~~~~~~~~~~~~~~~~~~ include/linux/uaccess.h:157:6: note: Left side of '&&' is true include/linux/uaccess.h:157:2: note: Taking true branch if (!should_fail_usercopy() && likely(access_ok(from, n))) { ^ include/linux/uaccess.h:159:9: note: Calling 'raw_copy_from_user' res =3D raw_copy_from_user(to, from, n); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ arch/arm/include/asm/uaccess.h:581:2: note: Returning zero, which partic= ipates in a condition later return 0; ^~~~~~~~ include/linux/uaccess.h:159:9: note: Returning from 'raw_copy_from_user' res =3D raw_copy_from_user(to, from, n); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/uaccess.h:161:2: note: Taking false branch if (unlikely(res)) ^ include/linux/uaccess.h:163:2: note: Returning zero (loaded from 'res'),= which participates in a condition later return res; ^~~~~~~~~~ include/linux/uaccess.h:192:7: note: Returning from '_copy_from_user' n =3D _copy_from_user(to, from, n); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/uaccess.h:193:2: note: Returning zero (loaded from 'n'), w= hich participates in a condition later return n; ^~~~~~~~ drivers/mtd/mtdchar.c:603:6: note: Returning from 'copy_from_user' if (copy_from_user(&req, argp, sizeof(req))) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/mtdchar.c:603:2: note: Taking false branch if (copy_from_user(&req, argp, sizeof(req))) ^ drivers/mtd/mtdchar.c:609:6: note: Assuming field '_write_oob' is non-nu= ll if (!master->_write_oob) ^~~~~~~~~~~~~~~~~~~ drivers/mtd/mtdchar.c:609:2: note: Taking false branch if (!master->_write_oob) ^ drivers/mtd/mtdchar.c:612:6: note: Assuming 'usr_data' is non-null if (!usr_data) ^~~~~~~~~ drivers/mtd/mtdchar.c:612:2: note: Taking false branch if (!usr_data) ^ drivers/mtd/mtdchar.c:615:6: note: Assuming 'usr_oob' is null if (!usr_oob) ^~~~~~~~ drivers/mtd/mtdchar.c:615:2: note: Taking true branch -- include/linux/spinlock.h:379:2: note: expanded from macro 'spin_lock_irq= save' raw_spin_lock_irqsave(spinlock_check(lock), flags); \ ^ include/linux/spinlock.h:240:2: note: expanded from macro 'raw_spin_lock= _irqsave' do { \ ^ drivers/dma/sf-pdma/sf-pdma.c:57:2: note: Loop condition is false. Exit= ing loop spin_lock_irqsave(&chan->lock, flags); ^ include/linux/spinlock.h:377:43: note: expanded from macro 'spin_lock_ir= qsave' #define spin_lock_irqsave(lock, flags) \ ^ drivers/dma/sf-pdma/sf-pdma.c:59:6: note: Access to field 'desc' results= in a dereference of a null pointer (loaded from variable 'chan') if (chan->desc && !chan->desc->in_use) { ^~~~ drivers/dma/sf-pdma/sf-pdma.c:126:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&chan->cfg, cfg, sizeof(*cfg)); ^~~~~~ drivers/dma/sf-pdma/sf-pdma.c:126:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(&chan->cfg, cfg, sizeof(*cfg)); ^~~~~~ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 37 warnings generated. drivers/dma/s3c24xx-dma.c:322:20: warning: Access to field 'clk' results= in a dereference of a null pointer (loaded from variable 'phy') [clang-ana= lyzer-core.NullDereference] ret =3D clk_enable(phy->clk); ^ drivers/dma/s3c24xx-dma.c:1072:2: note: Loop condition is false. Exitin= g loop spin_lock_irqsave(&s3cchan->vc.lock, flags); ^ include/linux/spinlock.h:379:2: note: expanded from macro 'spin_lock_irq= save' raw_spin_lock_irqsave(spinlock_check(lock), flags); \ ^ include/linux/spinlock.h:240:2: note: expanded from macro 'raw_spin_lock= _irqsave' do { \ ^ drivers/dma/s3c24xx-dma.c:1072:2: note: Loop condition is false. Exitin= g loop spin_lock_irqsave(&s3cchan->vc.lock, flags); ^ include/linux/spinlock.h:377:43: note: expanded from macro 'spin_lock_ir= qsave' #define spin_lock_irqsave(lock, flags) \ ^ drivers/dma/s3c24xx-dma.c:1073:6: note: Assuming the condition is true if (vchan_issue_pending(&s3cchan->vc)) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:1073:2: note: Taking true branch if (vchan_issue_pending(&s3cchan->vc)) { ^ drivers/dma/s3c24xx-dma.c:1074:7: note: Assuming field 'phy' is null if (!s3cchan->phy && s3cchan->state !=3D S3C24XX_DMA_CHA= N_WAITING) ^~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:1074:7: note: Left side of '&&' is true drivers/dma/s3c24xx-dma.c:1074:24: note: Assuming field 'state' is not e= qual to S3C24XX_DMA_CHAN_WAITING if (!s3cchan->phy && s3cchan->state !=3D S3C24XX_DMA_CHA= N_WAITING) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~ drivers/dma/s3c24xx-dma.c:1074:3: note: Taking true branch if (!s3cchan->phy && s3cchan->state !=3D S3C24XX_DMA_CHA= N_WAITING) ^ drivers/dma/s3c24xx-dma.c:1075:4: note: Calling 's3c24xx_dma_phy_alloc_a= nd_start' s3c24xx_dma_phy_alloc_and_start(s3cchan); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:532:8: note: Calling 's3c24xx_dma_get_phy' phy =3D s3c24xx_dma_get_phy(s3cchan); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:289:2: note: 'phy' initialized to a null point= er value struct s3c24xx_dma_phy *phy =3D NULL; ^~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:294:14: note: Assuming 'i' is >=3D field 'num_= phy_channels' for (i =3D 0; i < s3cdma->pdata->num_phy_channels; i++) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:294:2: note: Loop condition is false. Executio= n continues on line 315 for (i =3D 0; i < s3cdma->pdata->num_phy_channels; i++) { ^ drivers/dma/s3c24xx-dma.c:315:6: note: Assuming 'i' is not equal to fiel= d 'num_phy_channels' if (i =3D=3D s3cdma->pdata->num_phy_channels) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:315:2: note: Taking false branch if (i =3D=3D s3cdma->pdata->num_phy_channels) { ^ drivers/dma/s3c24xx-dma.c:321:6: note: Assuming field 'has_clocks' is tr= ue if (s3cdma->sdata->has_clocks) { ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:321:2: note: Taking true branch if (s3cdma->sdata->has_clocks) { ^ drivers/dma/s3c24xx-dma.c:322:20: note: Access to field 'clk' results in= a dereference of a null pointer (loaded from variable 'phy') ret =3D clk_enable(phy->clk); ^~~ drivers/dma/s3c24xx-dma.c:529:29: warning: Value stored to 's3cdma' duri= ng its initialization is never read [clang-analyzer-deadcode.DeadStores] struct s3c24xx_dma_engine *s3cdma =3D s3cchan->host; ^~~~~~ ~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:529:29: note: Value stored to 's3cdma' during = its initialization is never read struct s3c24xx_dma_engine *s3cdma =3D s3cchan->host; ^~~~~~ ~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:552:29: warning: Value stored to 's3cdma' duri= ng its initialization is never read [clang-analyzer-deadcode.DeadStores] struct s3c24xx_dma_engine *s3cdma =3D s3cchan->host; ^~~~~~ ~~~~~~~~~~~~~ drivers/dma/s3c24xx-dma.c:552:29: note: Value stored to 's3cdma' during = its initialization is never read struct s3c24xx_dma_engine *s3cdma =3D s3cchan->host; ^~~~~~ ~~~~~~~~~~~~~ >> drivers/dma/s3c24xx-dma.c:1252:4: warning: Call to function 'sprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(clk_name, "dma.%d", i); ^~~~~~~ drivers/dma/s3c24xx-dma.c:1252:4: note: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 sprintf(clk_name, "dma.%d", i); ^~~~~~~ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/input/keyboard/lm8323.c:333:3: warning: Value stored to 'active'= is never read [clang-analyzer-deadcode.DeadStores] active =3D debounce + 3; ^ ~~~~~~~~~~~~ drivers/input/keyboard/lm8323.c:333:3: note: Value stored to 'active' is= never read active =3D debounce + 3; ^ ~~~~~~~~~~~~ drivers/input/keyboard/lm8323.c:528:9: warning: Call to function 'sprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'sprintf_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", pwm->fade_time); ^~~~~~~ drivers/input/keyboard/lm8323.c:528:9: note: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", pwm->fade_time); ^~~~~~~ drivers/input/keyboard/lm8323.c:595:9: warning: Call to function 'sprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'sprintf_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%u\n", !lm->kp_enabled); ^~~~~~~ drivers/input/keyboard/lm8323.c:595:9: note: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%u\n", !lm->kp_enabled); ^~~~~~~ drivers/input/keyboard/lm8323.c:705:2: warning: Call to function 'snprin= tf' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'snprintf_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(lm->phys, sizeof(lm->phys), ^~~~~~~~ drivers/input/keyboard/lm8323.c:705:2: note: Call to function 'snprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'snprintf_s' in case of C11 snprintf(lm->phys, sizeof(lm->phys), ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/mfd/si476x-i2c.c:717:3: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&core->power_up_parameters, ^~~~~~ drivers/mfd/si476x-i2c.c:717:3: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(&core->power_up_parameters, ^~~~~~ drivers/mfd/si476x-i2c.c:734:3: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&core->pinmux, &pdata->pinmux, ^~~~~~ drivers/mfd/si476x-i2c.c:734:3: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(&core->pinmux, &pdata->pinmux, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 19 warnings generated. drivers/mfd/qcom-pm8xxx.c:549:2: warning: Value stored to 'rev' is never= read [clang-analyzer-deadcode.DeadStores] rev |=3D val << BITS_PER_BYTE; ^ ~~~~~~~~~~~~~~~~~~~~ drivers/mfd/qcom-pm8xxx.c:549:2: note: Value stored to 'rev' is never re= ad rev |=3D val << BITS_PER_BYTE; ^ ~~~~~~~~~~~~~~~~~~~~ Suppressed 18 warnings (17 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. drivers/mfd/aat2870-core.c:222:11: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] count +=3D sprintf(buf, "aat2870 registers\n"); ^~~~~~~ drivers/mfd/aat2870-core.c:222:11: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 count +=3D sprintf(buf, "aat2870 registers\n"); ^~~~~~~ drivers/mfd/aat2870-core.c:224:12: warning: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count +=3D snprintf(buf + count, PAGE_SIZE - count, "0x%= 02x: ", addr); ^~~~~~~~ drivers/mfd/aat2870-core.c:224:12: note: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 count +=3D snprintf(buf + count, PAGE_SIZE - count, "0x%= 02x: ", addr); ^~~~~~~~ drivers/mfd/aat2870-core.c:230:13: warning: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count +=3D snprintf(buf + count, PAGE_SIZE - cou= nt, ^~~~~~~~ drivers/mfd/aat2870-core.c:230:13: note: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 count +=3D snprintf(buf + count, PAGE_SIZE - cou= nt, ^~~~~~~~ drivers/mfd/aat2870-core.c:233:13: warning: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count +=3D snprintf(buf + count, PAGE_SIZE - cou= nt, ^~~~~~~~ drivers/mfd/aat2870-core.c:233:13: note: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 count +=3D snprintf(buf + count, PAGE_SIZE - cou= nt, ^~~~~~~~ drivers/mfd/aat2870-core.c:239:12: warning: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count +=3D snprintf(buf + count, PAGE_SIZE - count, "\n"= ); ^~~~~~~~ drivers/mfd/aat2870-core.c:239:12: note: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 count +=3D snprintf(buf + count, PAGE_SIZE - count, "\n"= ); ^~~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 5 warnings generated. lib/zstd/compress/zstd_compress_sequences.c:260:9: warning: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 [cl= ang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] ZSTD_memcpy(nextCTable, prevCTable, prevCTableSize); -- ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:256:16: note: Assuming 'row' is= < field 'num_rows' for (row =3D 0; row < kp->num_rows; row++) { ^~~~~~~~~~~~~~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:256:2: note: Loop condition is = true. Entering loop body for (row =3D 0; row < kp->num_rows; row++) { ^ drivers/input/keyboard/pmic8xxx-keypad.c:257:33: note: The left operand = of '&' is a garbage value row_state =3D (~new_state[row]) & ~~~~~~~~~~~~~~~ ^ drivers/input/keyboard/pmic8xxx-keypad.c:290:3: warning: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(kp->keystate, new_state, sizeof(new_state)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:290:3: note: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(kp->keystate, new_state, sizeof(new_state)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:299:3: warning: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(kp->keystate, new_state, sizeof(new_state)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:299:3: note: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(kp->keystate, new_state, sizeof(new_state)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:308:3: warning: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(kp->keystate, new_state, sizeof(new_state)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:308:3: note: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(kp->keystate, new_state, sizeof(new_state)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:580:2: warning: Call to functio= n 'memset' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memset_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(kp->keystate, 0xff, sizeof(kp->keystate)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:580:2: note: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 memset(kp->keystate, 0xff, sizeof(kp->keystate)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:581:2: warning: Call to functio= n 'memset' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memset_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(kp->stuckstate, 0xff, sizeof(kp->stuckstate)); ^~~~~~ drivers/input/keyboard/pmic8xxx-keypad.c:581:2: note: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 memset(kp->stuckstate, 0xff, sizeof(kp->stuckstate)); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/i2c/muxes/i2c-mux-reg.c:170:3: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&mux->data, dev_get_platdata(&pdev->dev), ^~~~~~ drivers/i2c/muxes/i2c-mux-reg.c:170:3: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&mux->data, dev_get_platdata(&pdev->dev), ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/i2c/i2c-slave-eeprom.c:102:2: warning: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, &eeprom->buffer[off], count); ^~~~~~ drivers/i2c/i2c-slave-eeprom.c:102:2: note: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, &eeprom->buffer[off], count); ^~~~~~ drivers/i2c/i2c-slave-eeprom.c:117:2: warning: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&eeprom->buffer[off], buf, count); ^~~~~~ drivers/i2c/i2c-slave-eeprom.c:117:2: note: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 memcpy(&eeprom->buffer[off], buf, count); ^~~~~~ drivers/i2c/i2c-slave-eeprom.c:138:3: warning: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(eeprom->buffer, 0xff, size); ^~~~~~ drivers/i2c/i2c-slave-eeprom.c:138:3: note: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 memset(eeprom->buffer, 0xff, size); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 14 warnings generated. drivers/misc/echo/echo.c:247:3: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ec->fir_taps16[i], 0, ec->taps * sizeof(int16_t)); ^~~~~~ drivers/misc/echo/echo.c:247:3: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(ec->fir_taps16[i], 0, ec->taps * sizeof(int16_t)); ^~~~~~ drivers/misc/echo/echo.c:256:2: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ec->snapshot, ec->fir_taps16[0], ec->taps * sizeof(int16_= t)); ^~~~~~ drivers/misc/echo/echo.c:256:2: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(ec->snapshot, ec->fir_taps16[0], ec->taps * sizeof(int16_= t)); ^~~~~~ drivers/misc/echo/echo.c:442:4: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ec->fir_taps16[0], ec->fir_taps16[1], ^~~~~~ drivers/misc/echo/echo.c:442:4: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(ec->fir_taps16[0], ec->fir_taps16[1], ^~~~~~ Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 53 warnings generated. >> drivers/media/dvb-frontends/dib9000.c:242:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(state->msg, 0, 2 * sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:242:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(state->msg, 0, 2 * sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:330:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&state->msg[0], 0, sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:330:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(&state->msg[0], 0, sizeof(struct i2c_msg)); ^~~~~~ >> drivers/media/dvb-frontends/dib9000.c:347:3: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->i2c_write_buffer[2], buf, l); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:347:3: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->i2c_write_buffer[2], buf, l); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:741:5: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(msg, block + 1, (*size) * 2); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:741:5: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(msg, block + 1, (*size) * 2); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:1988:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->channel_status, channel_status, sizeof(struct dvb= _frontend_parametersContext)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:1988:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->channel_status, channel_status, sizeof(struct dvb= _frontend_parametersContext)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:2034:3: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->fe[index_frontend]->dtv_property_cache, &= fe->dtv_property_cache, sizeof(struct dtv_frontend_properties)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:2034:3: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->fe[index_frontend]->dtv_property_cache, &= fe->dtv_property_cache, sizeof(struct dtv_frontend_properties)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:2486:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&st->chip.d9.cfg, cfg, sizeof(struct dib9000_config)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:2486:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&st->chip.d9.cfg, cfg, sizeof(struct dib9000_config)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:2507:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&st->fe[0]->ops, &dib9000_ops, sizeof(struct dvb_frontend= _ops)); ^~~~~~ drivers/media/dvb-frontends/dib9000.c:2507:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&st->fe[0]->ops, &dib9000_ops, sizeof(struct dvb_frontend= _ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. drivers/input/ff-memless.c:335:2: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(combo_effect, 0, sizeof(struct ff_effect)); ^~~~~~ drivers/input/ff-memless.c:335:2: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(combo_effect, 0, sizeof(struct ff_effect)); ^~~~~~ drivers/input/ff-memless.c:395:2: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(handled_bm, 0, sizeof(handled_bm)); ^~~~~~ drivers/input/ff-memless.c:395:2: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(handled_bm, 0, sizeof(handled_bm)); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/input/sparse-keymap.c:124:4: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ke->scancode, &key->code, sizeof(key->cod= e)); ^~~~~~ drivers/input/sparse-keymap.c:124:4: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(ke->scancode, &key->code, sizeof(key->cod= e)); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. lib/fault-inject.c:26:6: warning: Call to function 'sscanf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(str, "%lu,%lu,%d,%d", ^~~~~~ lib/fault-inject.c:26:6: note: Call to function 'sscanf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sscanf_s' in case of C11 if (sscanf(str, "%lu,%lu,%d,%d", ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/media/i2c/cx25840/cx25840-ir.c:695:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(p, &ir_state->rx_params, ^~~~~~ drivers/media/i2c/cx25840/cx25840-ir.c:695:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(p, &ir_state->rx_params, ^~~~~~ drivers/media/i2c/cx25840/cx25840-ir.c:885:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(p, &ir_state->tx_params, ^~~~~~ drivers/media/i2c/cx25840/cx25840-ir.c:885:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(p, &ir_state->tx_params, ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/i2c/m5mols/m5mols_core.c:1022:3: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D m5mols_init_controls(sd); -- ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:922:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_write_reg(state, 0x0011, 0x00); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:925:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_write_reg(state, 0x0014, 0); /* gain error=3D0= */ ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:925:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_write_reg(state, 0x0014, 0); /* gain error=3D0= */ ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:928:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_read_reg(state, 0x103c, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:928:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_read_reg(state, 0x103c, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:931:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_write_reg(state, 0x103c, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:931:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_write_reg(state, 0x103c, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:934:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_read_reg(state, 0x103d, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:934:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_read_reg(state, 0x103d, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:937:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_write_reg(state, 0x103d, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:937:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_write_reg(state, 0x103d, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:940:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_read_reg(state, 0x1036, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:940:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_read_reg(state, 0x1036, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:943:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_write_reg(state, 0x1036, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:943:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_write_reg(state, 0x1036, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:946:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_read_reg(state, 0x211f, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:946:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_read_reg(state, 0x211f, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:948:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_write_reg(state, 0x211f, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:948:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_write_reg(state, 0x211f, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:951:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_read_reg(state, 0x2849, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:951:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_read_reg(state, 0x2849, &val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:953:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_write_reg(state, 0x2849, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:953:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_write_reg(state, 0x2849, val); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:956:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_set_vsb(state); ^ ~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:956:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_set_vsb(state); ^ ~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:959:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_mpeg_mode(state, state->cfg->mpeg_mode); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:959:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_mpeg_mode(state, state->cfg->mpeg_mode); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:962:2: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D lgdt3306a_mpeg_tristate(state, 1); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:962:2: note: Value stored to 're= t' is never read ret =3D lgdt3306a_mpeg_tristate(state, 1); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:996:3: warning: Value stored to = 'ret' is never read [clang-analyzer-deadcode.DeadStores] ret =3D fe->ops.tuner_ops.set_params(fe); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:996:3: note: Value stored to 're= t' is never read ret =3D fe->ops.tuner_ops.set_params(fe); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:1183:2: warning: Value stored to= 'modeOper' is never read [clang-analyzer-deadcode.DeadStores] modeOper =3D LG3306_UNKNOWN_MODE; ^ ~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:1183:2: note: Value stored to 'm= odeOper' is never read modeOper =3D LG3306_UNKNOWN_MODE; ^ ~~~~~~~~~~~~~~~~~~~ >> drivers/media/dvb-frontends/lgdt3306a.c:1812:2: warning: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &lgdt3306a_ops, ^~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:1812:2: note: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &lgdt3306a_ops, ^~~~~~ >> drivers/media/dvb-frontends/lgdt3306a.c:2100:3: warning: Call to functio= n 'memset' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memset_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(regval2, 0xff, sizeof(regval2)); ^~~~~~ drivers/media/dvb-frontends/lgdt3306a.c:2100:3: note: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 memset(regval2, 0xff, sizeof(regval2)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 16 warnings generated. Suppressed 16 warnings (16 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 57 warnings generated. drivers/i2c/i2c-core-base.c:645:9: warning: Call to function 'sprintf' i= s insecure as it does not provide bounding of the memory buffer or security= checks introduced in the C11 standard. Replace with analogous functions th= at support length arguments or provides boundary checks such as 'sprintf_s'= in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBuff= erHandling] return sprintf(buf, "%s\n", dev->type =3D=3D &i2c_client_type ? ^~~~~~~ drivers/i2c/i2c-core-base.c:645:9: note: Call to function 'sprintf' is i= nsecure as it does not provide bounding of the memory buffer or security ch= ecks introduced in the C11 standard. Replace with analogous functions that = support length arguments or provides boundary checks such as 'sprintf_s' in= case of C11 return sprintf(buf, "%s\n", dev->type =3D=3D &i2c_client_type ? ^~~~~~~ drivers/i2c/i2c-core-base.c:664:9: warning: Call to function 'sprintf' i= s insecure as it does not provide bounding of the memory buffer or security= checks introduced in the C11 standard. Replace with analogous functions th= at support length arguments or provides boundary checks such as 'sprintf_s'= in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBuff= erHandling] return sprintf(buf, "%s%s\n", I2C_MODULE_PREFIX, client->name); ^~~~~~~ drivers/i2c/i2c-core-base.c:664:9: note: Call to function 'sprintf' is i= nsecure as it does not provide bounding of the memory buffer or security ch= ecks introduced in the C11 standard. Replace with analogous functions that = support length arguments or provides boundary checks such as 'sprintf_s' in= case of C11 return sprintf(buf, "%s%s\n", I2C_MODULE_PREFIX, client->name); ^~~~~~~ drivers/i2c/i2c-core-base.c:1185:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&info, 0, sizeof(struct i2c_board_info)); ^~~~~~ drivers/i2c/i2c-core-base.c:1185:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&info, 0, sizeof(struct i2c_board_info)); ^~~~~~ drivers/i2c/i2c-core-base.c:1196:2: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(info.type, buf, blank - buf); ^~~~~~ drivers/i2c/i2c-core-base.c:1196:2: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(info.type, buf, blank - buf); ^~~~~~ drivers/i2c/i2c-core-base.c:1199:8: warning: Call to function 'sscanf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] res =3D sscanf(++blank, "%hi%c", &info.addr, &end); ^~~~~~ drivers/i2c/i2c-core-base.c:1199:8: note: Call to function 'sscanf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sscanf_s' in case of C11 res =3D sscanf(++blank, "%hi%c", &info.addr, &end); ^~~~~~ drivers/i2c/i2c-core-base.c:1254:8: warning: Call to function 'sscanf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] res =3D sscanf(buf, "%hi%c", &addr, &end); ^~~~~~ drivers/i2c/i2c-core-base.c:1254:8: note: Call to function 'sscanf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sscanf_s' in case of C11 res =3D sscanf(buf, "%hi%c", &addr, &end); ^~~~~~ drivers/i2c/i2c-core-base.c:1740:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&adap->dev, 0, sizeof(adap->dev)); ^~~~~~ drivers/i2c/i2c-core-base.c:1740:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&adap->dev, 0, sizeof(adap->dev)); ^~~~~~ drivers/i2c/i2c-core-base.c:2316:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&info, 0, sizeof(struct i2c_board_info)); ^~~~~~ drivers/i2c/i2c-core-base.c:2316:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&info, 0, sizeof(struct i2c_board_info)); ^~~~~~ drivers/i2c/i2c-core-base.c:2521:3: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(msg->buf, buf, msg->len); ^~~~~~ drivers/i2c/i2c-core-base.c:2521:3: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(msg->buf, buf, msg->len); ^~~~~~ Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/i2c/busses/i2c-gpio.c:384:4: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(pdata, dev_get_platdata(dev), sizeof(*pda= ta)); ^~~~~~ drivers/i2c/busses/i2c-gpio.c:384:4: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(pdata, dev_get_platdata(dev), sizeof(*pda= ta)); ^~~~~~ drivers/i2c/busses/i2c-gpio.c:441:3: warning: Call to function 'snprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'snprintf_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(adap->name, sizeof(adap->name), "i2c-gpio%d", p= dev->id); ^~~~~~~~ drivers/i2c/busses/i2c-gpio.c:441:3: note: Call to function 'snprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'snprintf_s' in case of C11 snprintf(adap->name, sizeof(adap->name), "i2c-gpio%d", p= dev->id); ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/i2c/busses/i2c-nomadik.c:1034:2: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(adap->name, sizeof(adap->name), ^~~~~~~~ drivers/i2c/busses/i2c-nomadik.c:1034:2: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(adap->name, sizeof(adap->name), -- ^~~~ drivers/media/i2c/ov7670.c:1522:8: note: Calling 'ov7670_read' ret =3D ov7670_read(sd, REG_COM1, &com1) + ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:565:6: note: Assuming field 'use_smbus' is tr= ue if (info->use_smbus) ^~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:565:2: note: Taking true branch if (info->use_smbus) ^ drivers/media/i2c/ov7670.c:566:10: note: Calling 'ov7670_read_smbus' return ov7670_read_smbus(sd, reg, value); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:485:6: note: Assuming 'ret' is < 0 if (ret >=3D 0) { ^~~~~~~~ drivers/media/i2c/ov7670.c:485:2: note: Taking false branch if (ret >=3D 0) { ^ drivers/media/i2c/ov7670.c:489:2: note: Returning without writing to '*v= alue' return ret; ^ drivers/media/i2c/ov7670.c:566:10: note: Returning from 'ov7670_read_smb= us' return ov7670_read_smbus(sd, reg, value); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:566:3: note: Returning without writing to '*v= alue' return ov7670_read_smbus(sd, reg, value); ^ drivers/media/i2c/ov7670.c:1522:8: note: Returning from 'ov7670_read' ret =3D ov7670_read(sd, REG_COM1, &com1) + ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:1525:6: note: Assuming 'ret' is 0 if (ret) ^~~ drivers/media/i2c/ov7670.c:1525:2: note: Taking false branch if (ret) ^ drivers/media/i2c/ov7670.c:1528:15: note: The left operand of '&' is a g= arbage value com1 =3D (com1 & 0xfc) | (value & 0x03); ~~~~ ^ drivers/media/i2c/ov7670.c:1530:17: warning: The left operand of '&' is = a garbage value [clang-analyzer-core.UndefinedBinaryOperatorResult] aechh =3D (aechh & 0xc0) | ((value >> 10) & 0x3f); ^ drivers/media/i2c/ov7670.c:1597:2: note: Control jumps to 'case 10094849= :' at line 1617 switch (ctrl->id) { ^ drivers/media/i2c/ov7670.c:1620:7: note: Assuming field 'val' is equal t= o V4L2_EXPOSURE_MANUAL if (ctrl->val =3D=3D V4L2_EXPOSURE_MANUAL) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:1620:3: note: Taking true branch if (ctrl->val =3D=3D V4L2_EXPOSURE_MANUAL) { ^ drivers/media/i2c/ov7670.c:1622:11: note: Calling 'ov7670_s_exp' return ov7670_s_exp(sd, info->exposure->val); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:1520:34: note: 'aechh' declared without an in= itial value unsigned char com1, com8, aech, aechh; ^~~~~ drivers/media/i2c/ov7670.c:1524:3: note: Calling 'ov7670_read' ov7670_read(sd, REG_AECHH, &aechh); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:565:12: note: Field 'use_smbus' is true if (info->use_smbus) ^ drivers/media/i2c/ov7670.c:565:2: note: Taking true branch if (info->use_smbus) ^ drivers/media/i2c/ov7670.c:566:10: note: Calling 'ov7670_read_smbus' return ov7670_read_smbus(sd, reg, value); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:485:6: note: Assuming 'ret' is < 0 if (ret >=3D 0) { ^~~~~~~~ drivers/media/i2c/ov7670.c:485:2: note: Taking false branch if (ret >=3D 0) { ^ drivers/media/i2c/ov7670.c:489:2: note: Returning without writing to '*v= alue' return ret; ^ drivers/media/i2c/ov7670.c:566:10: note: Returning from 'ov7670_read_smb= us' return ov7670_read_smbus(sd, reg, value); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:566:3: note: Returning without writing to '*v= alue' return ov7670_read_smbus(sd, reg, value); ^ drivers/media/i2c/ov7670.c:1524:3: note: Returning from 'ov7670_read' ov7670_read(sd, REG_AECHH, &aechh); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov7670.c:1525:6: note: Assuming 'ret' is 0 if (ret) ^~~ drivers/media/i2c/ov7670.c:1525:2: note: Taking false branch if (ret) ^ drivers/media/i2c/ov7670.c:1530:17: note: The left operand of '&' is a g= arbage value aechh =3D (aechh & 0xc0) | ((value >> 10) & 0x3f); ~~~~~ ^ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. >> drivers/tty/serial/bcm63xx_uart.c:825:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(port, 0, sizeof(*port)); ^~~~~~ drivers/tty/serial/bcm63xx_uart.c:825:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(port, 0, sizeof(*port)); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. >> drivers/tty/serial/samsung_tty.c:1454:3: warning: Call to function 'spri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'sprintf_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(clkname, "clk_uart_baud%d", cnt); ^~~~~~~ drivers/tty/serial/samsung_tty.c:1454:3: note: Call to function 'sprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sprintf_s' in case of C11 sprintf(clkname, "clk_uart_baud%d", cnt); ^~~~~~~ drivers/tty/serial/samsung_tty.c:1994:3: warning: Call to function 'spri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'sprintf_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(clk_name, "clk_uart_baud%d", clk_num); ^~~~~~~ drivers/tty/serial/samsung_tty.c:1994:3: note: Call to function 'sprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sprintf_s' in case of C11 sprintf(clk_name, "clk_uart_baud%d", clk_num); ^~~~~~~ drivers/tty/serial/samsung_tty.c:2554:3: warning: Call to function 'spri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'sprintf_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(clk_name, "clk_uart_baud%d", clk_sel); ^~~~~~~ drivers/tty/serial/samsung_tty.c:2554:3: note: Call to function 'sprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sprintf_s' in case of C11 sprintf(clk_name, "clk_uart_baud%d", clk_sel); ^~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 38 warnings generated. drivers/tty/n_tty.c:165:3: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(buffer, 0x00, size); ^~~~~~ drivers/tty/n_tty.c:165:3: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(buffer, 0x00, size); ^~~~~~ drivers/tty/n_tty.c:176:3: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(to, from, size); ^~~~~~ drivers/tty/n_tty.c:176:3: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(to, from, size); ^~~~~~ drivers/tty/n_tty.c:184:2: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(to, from, n); ^~~~~~ drivers/tty/n_tty.c:184:2: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(to, from, n); ^~~~~~ drivers/tty/n_tty.c:1456:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(read_buf_addr(ldata, head), cp, n); ^~~~~~ drivers/tty/n_tty.c:1456:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(read_buf_addr(ldata, head), cp, n); ^~~~~~ drivers/tty/n_tty.c:1463:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(read_buf_addr(ldata, head), cp, n); ^~~~~~ drivers/tty/n_tty.c:1463:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(read_buf_addr(ldata, head), cp, n); ^~~~~~ drivers/tty/n_tty.c:1874:3: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(*kbp, from, n); ^~~~~~ drivers/tty/n_tty.c:1874:3: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(*kbp, from, n); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 62 warnings generated. fs/f2fs/gc.c:1280:2: warning: Call to function 'memcpy' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecure= API.DeprecatedOrUnsafeBufferHandling] memcpy(page_address(fio.encrypted_page), ^~~~~~ fs/f2fs/gc.c:1280:2: note: Call to function 'memcpy' is insecure as it d= oes not provide security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'memcpy_s' in case of C11 memcpy(page_address(fio.encrypted_page), ^~~~~~ include/linux/math64.h:92:15: warning: Division by zero [clang-analyzer-= core.DivideZero] *remainder =3D do_div(dividend, divisor); ^ include/asm-generic/div64.h:235:25: note: expanded from macro 'do_div' __rem =3D (uint32_t)(n) % __base; \ ^ fs/f2fs/gc.c:324:23: note: Assuming the condition is false unsigned int secno =3D GET_SEC_FROM_SEG(sbi, segno); ^ fs/f2fs/segment.h:104:4: note: expanded from macro 'GET_SEC_FROM_SEG' (((segno) =3D=3D -1) ? -1: (segno) / (sbi)->segs_per_sec) ^~~~~~~~~~~~~ fs/f2fs/gc.c:324:23: note: '?' condition is false unsigned int secno =3D GET_SEC_FROM_SEG(sbi, segno); ^ fs/f2fs/segment.h:104:3: note: expanded from macro 'GET_SEC_FROM_SEG' (((segno) =3D=3D -1) ? -1: (segno) / (sbi)->segs_per_sec) ^ fs/f2fs/gc.c:331:2: note: 'usable_segs_per_sec' initialized here unsigned int usable_segs_per_sec =3D f2fs_usable_segs_in_sec(sbi= , segno); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/f2fs/gc.c:333:14: note: Assuming 'i' is >=3D 'usable_segs_per_sec' for (i =3D 0; i < usable_segs_per_sec; i++) ^~~~~~~~~~~~~~~~~~~~~~~ fs/f2fs/gc.c:333:2: note: Loop condition is false. Execution continues o= n line 335 for (i =3D 0; i < usable_segs_per_sec; i++) ^ fs/f2fs/gc.c:337:25: note: Passing the value 0 via 2nd parameter 'diviso= r' mtime =3D div_u64(mtime, usable_segs_per_sec); ^~~~~~~~~~~~~~~~~~~ fs/f2fs/gc.c:337:10: note: Calling 'div_u64' mtime =3D div_u64(mtime, usable_segs_per_sec); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/math64.h:128:31: note: Passing the value 0 via 2nd paramet= er 'divisor' return div_u64_rem(dividend, divisor, &remainder); -- ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:160:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian(sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:160:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian(sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:163:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian(7 * sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:163:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian(7 * sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:170:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian_n(24, sizeof(u16), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:170:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian_n(24, sizeof(u16), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:173:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian_n(8, sizeof(u16), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:173:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian_n(8, sizeof(u16), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:176:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian_n(17, sizeof(u16), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:176:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian_n(17, sizeof(u16), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:179:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian(3 * sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:179:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian(3 * sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:183:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian(sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:183:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian(sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:186:3: warning: Value stored to 'bu= ffer' is never read [clang-analyzer-deadcode.DeadStores] buffer +=3D convert_endian(sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:186:3: note: Value stored to 'buffe= r' is never read buffer +=3D convert_endian(sizeof(u32), buffer); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl692.c:277:4: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(plocal_buf, &buffer[ix], chunk_len); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:277:4: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(plocal_buf, &buffer[ix], chunk_len); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:320:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(plocal_buf, buffer, total_len); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:320:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(plocal_buf, buffer, total_len); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:397:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(plocal_buf, buffer, total_len); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:397:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(plocal_buf, buffer, total_len); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:475:3: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&tx_buf[MXL_EAGLE_HOST_MSG_HEADER_SIZE], tx_paylo= ad, tx_payload_size); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:475:3: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&tx_buf[MXL_EAGLE_HOST_MSG_HEADER_SIZE], tx_paylo= ad, tx_payload_size); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:555:3: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(rx_payload, rx_buf + MXL_EAGLE_HOST_MSG_HEADER_SI= ZE, ^~~~~~ drivers/media/dvb-frontends/mxl692.c:555:3: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(rx_payload, rx_buf + MXL_EAGLE_HOST_MSG_HEADER_SI= ZE, ^~~~~~ drivers/media/dvb-frontends/mxl692.c:1320:3: warning: Value stored to 'r= et' is never read [clang-analyzer-deadcode.DeadStores] ret =3D -ENOMEM; ^ ~~~~~~~ drivers/media/dvb-frontends/mxl692.c:1320:3: note: Value stored to 'ret'= is never read ret =3D -ENOMEM; ^ ~~~~~~~ drivers/media/dvb-frontends/mxl692.c:1325:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->fe.ops, &mxl692_ops, sizeof(struct dvb_frontend_ops= )); ^~~~~~ drivers/media/dvb-frontends/mxl692.c:1325:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dev->fe.ops, &mxl692_ops, sizeof(struct dvb_frontend_ops= )); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 54 warnings generated. drivers/media/dvb-frontends/tc90522.c:51:2: warning: Value stored to 're= t' is never read [clang-analyzer-deadcode.DeadStores] ret =3D 0; ^ ~ drivers/media/dvb-frontends/tc90522.c:51:2: note: Value stored to 'ret' = is never read ret =3D 0; ^ ~ >> drivers/media/dvb-frontends/tc90522.c:283:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(stats, 0, sizeof(*stats)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:283:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(stats, 0, sizeof(*stats)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:297:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(stats, 0, sizeof(*stats)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:297:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(stats, 0, sizeof(*stats)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:343:2: warning: Value stored to 'm= ode' is never read [clang-analyzer-deadcode.DeadStores] mode =3D 1; ^ ~ drivers/media/dvb-frontends/tc90522.c:343:2: note: Value stored to 'mode= ' is never read mode =3D 1; ^ ~ drivers/media/dvb-frontends/tc90522.c:443:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(stats, 0, sizeof(*stats)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:443:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(stats, 0, sizeof(*stats)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:457:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(stats, 0, sizeof(*stats)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:457:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(stats, 0, sizeof(*stats)); ^~~~~~ >> drivers/media/dvb-frontends/tc90522.c:682:3: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(p + 2, msgs[i].buf, msgs[i].len); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:682:3: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(p + 2, msgs[i].buf, msgs[i].len); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:797:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->cfg, cfg, sizeof(state->cfg)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:797:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->cfg, cfg, sizeof(state->cfg)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:800:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->fe.ops, ops, sizeof(*ops)); ^~~~~~ drivers/media/dvb-frontends/tc90522.c:800:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->fe.ops, ops, sizeof(*ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/media/tuners/tda18212.c:197:2: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->cfg, cfg, sizeof(struct tda18212_config)); ^~~~~~ drivers/media/tuners/tda18212.c:197:2: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dev->cfg, cfg, sizeof(struct tda18212_config)); ^~~~~~ drivers/media/tuners/tda18212.c:234:2: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &tda18212_tuner_ops, ^~~~~~ drivers/media/tuners/tda18212.c:234:2: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &tda18212_tuner_ops, ^~~~~~ drivers/media/tuners/tda18212.c:252:2: warning: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&fe->ops.tuner_ops, 0, sizeof(struct dvb_tuner_ops)); ^~~~~~ drivers/media/tuners/tda18212.c:252:2: note: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 memset(&fe->ops.tuner_ops, 0, sizeof(struct dvb_tuner_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 57 warnings generated. drivers/media/tuners/fc2580.c:30:21: warning: Value stored to 'client' d= uring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:30:21: note: Value stored to 'client' duri= ng its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:277:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:277:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:298:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:298:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:391:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:391:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:406:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:406:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:415:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:415:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:426:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:426:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:440:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:440:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:470:21: warning: Value stored to 'client' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:470:21: note: Value stored to 'client' dur= ing its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/tuners/fc2580.c:577:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &fc2580_dvb_tuner_ops, ^~~~~~ drivers/media/tuners/fc2580.c:577:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &fc2580_dvb_tuner_ops, -- ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2173:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] INPUT_CLEANSE_BITMASK(dev, MSC, msc); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2173:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 INPUT_CLEANSE_BITMASK(dev, MSC, msc); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2174:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] INPUT_CLEANSE_BITMASK(dev, LED, led); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2174:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 INPUT_CLEANSE_BITMASK(dev, LED, led); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2175:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] INPUT_CLEANSE_BITMASK(dev, SND, snd); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2175:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 INPUT_CLEANSE_BITMASK(dev, SND, snd); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2176:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] INPUT_CLEANSE_BITMASK(dev, FF, ff); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2176:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 INPUT_CLEANSE_BITMASK(dev, FF, ff); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2177:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] INPUT_CLEANSE_BITMASK(dev, SW, sw); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ drivers/input/input.c:2177:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 INPUT_CLEANSE_BITMASK(dev, SW, sw); ^ drivers/input/input.c:2164:4: note: expanded from macro 'INPUT_CLEANSE_B= ITMASK' memset(dev->bits##bit, 0, \ ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 16 warnings generated. drivers/base/power/qos-test.c:16:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&req1, 0, sizeof(req1)); ^~~~~~ drivers/base/power/qos-test.c:16:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&req1, 0, sizeof(req1)); ^~~~~~ drivers/base/power/qos-test.c:17:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&req2, 0, sizeof(req2)); ^~~~~~ drivers/base/power/qos-test.c:17:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&req2, 0, sizeof(req2)); ^~~~~~ drivers/base/power/qos-test.c:44:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&req1, 0, sizeof(req1)); ^~~~~~ drivers/base/power/qos-test.c:44:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&req1, 0, sizeof(req1)); ^~~~~~ drivers/base/power/qos-test.c:45:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&req2, 0, sizeof(req2)); ^~~~~~ drivers/base/power/qos-test.c:45:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&req2, 0, sizeof(req2)); ^~~~~~ drivers/base/power/qos-test.c:85:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&req, 0, sizeof(req)); ^~~~~~ drivers/base/power/qos-test.c:85:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(&req, 0, sizeof(req)); ^~~~~~ Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/ves1820.c:387:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &ves1820_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/ves1820.c:387:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &ves1820_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/ves1x93.c:493:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &ves1x93_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/ves1x93.c:493:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &ves1x93_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/media/dvb-frontends/sp887x.c:178:3: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf[2], mem + i, c); ^~~~~~ drivers/media/dvb-frontends/sp887x.c:178:3: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf[2], mem + i, c); ^~~~~~ drivers/media/dvb-frontends/sp887x.c:456:39: warning: The result of the = left shift is undefined because the left operand is negative [clang-analyze= r-core.UndefinedBinaryOperatorResult] (sp887x_readreg(state, 0xc07) << 6); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/sp887x.c:456:10: note: Calling 'sp887x_readr= eg' (sp887x_readreg(state, 0xc07) << 6); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/sp887x.c:84:6: note: Assuming the condition = is true if ((ret =3D i2c_transfer(state->i2c, msg, 2)) !=3D 2) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/sp887x.c:84:2: note: Taking true branch if ((ret =3D i2c_transfer(state->i2c, msg, 2)) !=3D 2) { ^ drivers/media/dvb-frontends/sp887x.c:85:3: note: Loop condition is false= . Exiting loop printk("%s: readreg error (ret =3D=3D %i)\n", __func__, = ret); ^ include/linux/printk.h:446:26: note: expanded from macro 'printk' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) ^ include/linux/printk.h:417:3: note: expanded from macro 'printk_index_wr= ap' __printk_index_emit(_fmt, NULL, NULL); \ ^ include/linux/printk.h:392:34: note: expanded from macro '__printk_index= _emit' #define __printk_index_emit(...) do {} while (0) ^ drivers/media/dvb-frontends/sp887x.c:86:3: note: Returning the value -1 return -1; ^~~~~~~~~ drivers/media/dvb-frontends/sp887x.c:456:10: note: Returning from 'sp887= x_readreg' (sp887x_readreg(state, 0xc07) << 6); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/sp887x.c:456:39: note: The result of the lef= t shift is undefined because the left operand is negative (sp887x_readreg(state, 0xc07) << 6); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/sp887x.c:583:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &sp887x_ops, sizeof(struct dvb_fron= tend_ops)); ^~~~~~ drivers/media/dvb-frontends/sp887x.c:583:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &sp887x_ops, sizeof(struct dvb_fron= tend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/misc/xilinx_sdfec.c:298:2: warning: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&status, 0, sizeof(status)); ^~~~~~ drivers/misc/xilinx_sdfec.c:298:2: note: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 memset(&status, 0, sizeof(status)); ^~~~~~ drivers/misc/xilinx_sdfec.c:444:2: warning: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&turbo_params, 0, sizeof(turbo_params)); ^~~~~~ drivers/misc/xilinx_sdfec.c:444:2: note: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 memset(&turbo_params, 0, sizeof(turbo_params)); ^~~~~~ drivers/misc/xilinx_sdfec.c:1416:2: warning: Call to function 'snprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'snprintf_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(xsdfec->dev_name, DEV_NAME_LEN, "xsdfec%d", xsdfec->dev= _id); ^~~~~~~~ drivers/misc/xilinx_sdfec.c:1416:2: note: Call to function 'snprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'snprintf_s' in case of C11 snprintf(xsdfec->dev_name, DEV_NAME_LEN, "xsdfec%d", xsdfec->dev= _id); ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 39 warnings generated. drivers/media/dvb-core/dmxdev.c:741:3: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&((*secfilter)->filter_value[3]), ^~~~~~ drivers/media/dvb-core/dmxdev.c:741:3: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&((*secfilter)->filter_value[3]), ^~~~~~ drivers/media/dvb-core/dmxdev.c:743:3: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&(*secfilter)->filter_mask[3], ^~~~~~ drivers/media/dvb-core/dmxdev.c:743:3: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&(*secfilter)->filter_mask[3], ^~~~~~ drivers/media/dvb-core/dmxdev.c:745:3: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&(*secfilter)->filter_mode[3], -- ^ drivers/ata/libata-transport.c:371:2: note: expanded from macro 'ata_lin= k_linkspeed_attr' ata_link_show_linkspeed(field, format) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/ata/libata-transport.c:367:9: note: expanded from macro 'ata_lin= k_show_linkspeed' return sprintf(buf, "%s\n", sata_spd_string(format(link->field))= ); \ ^~~~~~~ drivers/ata/libata-transport.c:376:1: warning: Call to function 'sprintf= ' is insecure as it does not provide bounding of the memory buffer or secur= ity checks introduced in the C11 standard. Replace with analogous functions= that support length arguments or provides boundary checks such as 'sprintf= _s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeB= ufferHandling] ata_link_linkspeed_attr(sata_spd, noop); ^ drivers/ata/libata-transport.c:371:2: note: expanded from macro 'ata_lin= k_linkspeed_attr' ata_link_show_linkspeed(field, format) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/ata/libata-transport.c:367:9: note: expanded from macro 'ata_lin= k_show_linkspeed' return sprintf(buf, "%s\n", sata_spd_string(format(link->field))= ); \ ^~~~~~~ drivers/ata/libata-transport.c:376:1: note: Call to function 'sprintf' i= s insecure as it does not provide bounding of the memory buffer or security= checks introduced in the C11 standard. Replace with analogous functions th= at support length arguments or provides boundary checks such as 'sprintf_s'= in case of C11 ata_link_linkspeed_attr(sata_spd, noop); ^ drivers/ata/libata-transport.c:371:2: note: expanded from macro 'ata_lin= k_linkspeed_attr' ata_link_show_linkspeed(field, format) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/ata/libata-transport.c:367:9: note: expanded from macro 'ata_lin= k_show_linkspeed' return sprintf(buf, "%s\n", sata_spd_string(format(link->field))= ); \ ^~~~~~~ drivers/ata/libata-transport.c:534:18: warning: Call to function 'sprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'sprintf_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] arg->written +=3D sprintf(arg->buf + arg->written, ^~~~~~~ drivers/ata/libata-transport.c:534:18: note: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 arg->written +=3D sprintf(arg->buf + arg->written, ^~~~~~~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 37 warnings generated. drivers/tty/tty_buffer.c:326:3: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(char_buf_ptr(tb, tb->used), chars, space); ^~~~~~ drivers/tty/tty_buffer.c:326:3: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(char_buf_ptr(tb, tb->used), chars, space); ^~~~~~ drivers/tty/tty_buffer.c:328:4: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(flag_buf_ptr(tb, tb->used), flag, space); ^~~~~~ drivers/tty/tty_buffer.c:328:4: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(flag_buf_ptr(tb, tb->used), flag, space); ^~~~~~ drivers/tty/tty_buffer.c:364:3: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(char_buf_ptr(tb, tb->used), chars, space); ^~~~~~ drivers/tty/tty_buffer.c:364:3: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(char_buf_ptr(tb, tb->used), chars, space); ^~~~~~ drivers/tty/tty_buffer.c:365:3: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(flag_buf_ptr(tb, tb->used), flags, space); ^~~~~~ drivers/tty/tty_buffer.c:365:3: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(flag_buf_ptr(tb, tb->used), flags, space); ^~~~~~ drivers/tty/tty_buffer.c:428:4: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(flag_buf_ptr(tb, tb->used), TTY_NORMAL, s= pace); ^~~~~~ drivers/tty/tty_buffer.c:428:4: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(flag_buf_ptr(tb, tb->used), TTY_NORMAL, s= pace); ^~~~~~ drivers/tty/tty_buffer.c:473:3: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(p, 0, n); ^~~~~~ drivers/tty/tty_buffer.c:473:3: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(p, 0, n); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/tty/serial/sccnxp.c:949:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&s->pdata, pdata, sizeof(struct sccnxp_pdata)); ^~~~~~ drivers/tty/serial/sccnxp.c:949:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(&s->pdata, pdata, sizeof(struct sccnxp_pdata)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/tty/serial/uartlite.c:387:2: warning: Value stored to 'ret' is n= ever read [clang-analyzer-deadcode.DeadStores] ret =3D uart_in32(ULITE_CONTROL, port); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/tty/serial/uartlite.c:387:2: note: Value stored to 'ret' is neve= r read ret =3D uart_in32(ULITE_CONTROL, port); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. >> drivers/power/supply/wm8350_power.c:179:9: warning: Call to function 'sp= rintf' is insecure as it does not provide bounding of the memory buffer or = security checks introduced in the C11 standard. Replace with analogous func= tions that support length arguments or provides boundary checks such as 'sp= rintf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUn= safeBufferHandling] return sprintf(buf, "%s\n", charge); ^~~~~~~ drivers/power/supply/wm8350_power.c:179:9: note: Call to function 'sprin= tf' is insecure as it does not provide bounding of the memory buffer or sec= urity checks introduced in the C11 standard. Replace with analogous functio= ns that support length arguments or provides boundary checks such as 'sprin= tf_s' in case of C11 return sprintf(buf, "%s\n", charge); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 18 warnings generated. drivers/pps/clients/pps-gpio.c:189:2: warning: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(data->info.name, PPS_MAX_NAME_LEN - 1, "%s.%d", ^~~~~~~~ drivers/pps/clients/pps-gpio.c:189:2: note: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 snprintf(data->info.name, PPS_MAX_NAME_LEN - 1, "%s.%d", ^~~~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 100 warnings generated. drivers/w1/w1.c:76:2: warning: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecur= eAPI.DeprecatedOrUnsafeBufferHandling] memset(md, 0, sizeof(struct w1_master) + sizeof(struct w1_bus_ma= ster)); ^~~~~~ drivers/w1/w1.c:76:2: note: Call to function 'memset' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memset_s' in case of C11 memset(md, 0, sizeof(struct w1_master) + sizeof(struct w1_bus_ma= ster)); ^~~~~~ drivers/w1/w1.c:94:9: warning: Call to function 'sprintf' is insecure as= it does not provide bounding of the memory buffer or security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%s\n", sl->name); ^~~~~~~ drivers/w1/w1.c:94:9: note: Call to function 'sprintf' is insecure as it= does not provide bounding of the memory buffer or security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%s\n", sl->name); ^~~~~~~ drivers/w1/w1.c:104:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, (u8 *)&sl->reg_num, count); ^~~~~~ drivers/w1/w1.c:104:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(buf, (u8 *)&sl->reg_num, count); ^~~~~~ drivers/w1/w1.c:216:10: warning: Call to function 'sprintf' is insecure = as it does not provide bounding of the memory buffer or security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%s\n", md->name); ^~~~~~~ drivers/w1/w1.c:216:10: note: Call to function 'sprintf' is insecure as = it does not provide bounding of the memory buffer or security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%s\n", md->name); ^~~~~~~ drivers/w1/w1.c:252:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%d\n", md->search_count); ^~~~~~~ drivers/w1/w1.c:252:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%d\n", md->search_count); ^~~~~~~ drivers/w1/w1.c:285:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%d\n", md->enable_pullup); ^~~~~~~ drivers/w1/w1.c:285:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%d\n", md->enable_pullup); ^~~~~~~ drivers/w1/w1.c:297:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "0x%p\n", md->bus_master); ^~~~~~~ drivers/w1/w1.c:297:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "0x%p\n", md->bus_master); ^~~~~~~ drivers/w1/w1.c:305:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%d\n", w1_timeout); ^~~~~~~ drivers/w1/w1.c:305:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%d\n", w1_timeout); ^~~~~~~ drivers/w1/w1.c:313:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%d\n", w1_timeout_us); ^~~~~~~ drivers/w1/w1.c:313:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%d\n", w1_timeout_us); ^~~~~~~ drivers/w1/w1.c:341:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%d\n", md->max_slave_count); ^~~~~~~ drivers/w1/w1.c:341:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%d\n", md->max_slave_count); ^~~~~~~ drivers/w1/w1.c:352:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%lu\n", md->attempts); ^~~~~~~ drivers/w1/w1.c:352:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%lu\n", md->attempts); ^~~~~~~ drivers/w1/w1.c:363:10: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D sprintf(buf, "%d\n", md->slave_count); ^~~~~~~ drivers/w1/w1.c:363:10: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 count =3D sprintf(buf, "%d\n", md->slave_count); ^~~~~~~ drivers/w1/w1.c:381:8: warning: Call to function 'snprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'snprintf_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] c -=3D snprintf(buf + PAGE_SIZE - c, c, "%s\n", sl->name= ); -- drivers/media/tuners/tuner-xc2028.c:769:2: warning: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&priv->cur_fw, 0, sizeof(priv->cur_fw)); ^~~~~~ drivers/media/tuners/tuner-xc2028.c:769:2: note: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 memset(&priv->cur_fw, 0, sizeof(priv->cur_fw)); ^~~~~~ drivers/media/tuners/tuner-xc2028.c:1037:3: warning: Value stored to 'rc= ' is never read [clang-analyzer-deadcode.DeadStores] rc =3D send_seq(priv, {0x00, 0x00}); ^ drivers/media/tuners/tuner-xc2028.c:1037:3: note: Value stored to 'rc' i= s never read drivers/media/tuners/tuner-xc2028.c:1396:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&priv->ctrl, p, sizeof(priv->ctrl)); ^~~~~~ drivers/media/tuners/tuner-xc2028.c:1396:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&priv->ctrl, p, sizeof(priv->ctrl)); ^~~~~~ drivers/media/tuners/tuner-xc2028.c:1497:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &xc2028_dvb_tuner_ops, ^~~~~~ drivers/media/tuners/tuner-xc2028.c:1497:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &xc2028_dvb_tuner_ops, ^~~~~~ Suppressed 47 warnings (45 in non-user code, 2 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 75 warnings generated. drivers/w1/w1_int.c:65:2: warning: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->dev, device, sizeof(struct device)); ^~~~~~ drivers/w1/w1_int.c:65:2: note: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 memcpy(&dev->dev, device, sizeof(struct device)); ^~~~~~ drivers/w1/w1_int.c:67:2: warning: Call to function 'snprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(dev->name, sizeof(dev->name), "w1_bus_master%u", dev->i= d); ^~~~~~~~ drivers/w1/w1_int.c:67:2: note: Call to function 'snprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'snprintf_s' in case of C11 snprintf(dev->name, sizeof(dev->name), "w1_bus_master%u", dev->i= d); ^~~~~~~~ drivers/w1/w1_int.c:136:2: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dev->bus_master, master, sizeof(struct w1_bus_master)); ^~~~~~ drivers/w1/w1_int.c:136:2: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(dev->bus_master, master, sizeof(struct w1_bus_master)); ^~~~~~ drivers/w1/w1_int.c:153:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(&msg, 0, sizeof(msg)); ^~~~~~ drivers/w1/w1_int.c:153:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(&msg, 0, sizeof(msg)); ^~~~~~ drivers/w1/w1_int.c:212:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(&msg, 0, sizeof(msg)); ^~~~~~ drivers/w1/w1_int.c:212:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(&msg, 0, sizeof(msg)); ^~~~~~ Suppressed 70 warnings (70 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/media/i2c/lm3560.c:123:3: warning: Value stored to 'rval' is nev= er read [clang-analyzer-deadcode.DeadStores] rval =3D lm3560_enable_ctrl(flash, led_no, true); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/lm3560.c:123:3: note: Value stored to 'rval' is never = read rval =3D lm3560_enable_ctrl(flash, led_no, true); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/lm3560.c:146:3: warning: Value stored to 'rval' is nev= er read [clang-analyzer-deadcode.DeadStores] rval =3D lm3560_enable_ctrl(flash, led_no, true); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/lm3560.c:146:3: note: Value stored to 'rval' is never = read rval =3D lm3560_enable_ctrl(flash, led_no, true); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/media/i2c/ir-kbd-i2c.c:861:2: warning: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(ir->phys, sizeof(ir->phys), "%s/%s", dev_name(&adap->de= v), ^~~~~~~~ drivers/media/i2c/ir-kbd-i2c.c:861:2: note: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 snprintf(ir->phys, sizeof(ir->phys), "%s/%s", dev_name(&adap->de= v), ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/dvb-frontends/si21xx.c:238:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(msg.buf + 1, data, len); ^~~~~~ drivers/media/dvb-frontends/si21xx.c:238:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(msg.buf + 1, data, len); ^~~~~~ drivers/media/dvb-frontends/si21xx.c:931:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &si21xx_ops, ^~~~~~ drivers/media/dvb-frontends/si21xx.c:931:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &si21xx_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. >> drivers/media/dvb-frontends/si2168.c:16:2: warning: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(cmd->args, buf, wlen); ^~~~~~ drivers/media/dvb-frontends/si2168.c:16:2: note: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 memcpy(cmd->args, buf, wlen); ^~~~~~ drivers/media/dvb-frontends/si2168.c:753:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->fe.ops, &si2168_ops, sizeof(struct dvb_frontend_ops= )); ^~~~~~ drivers/media/dvb-frontends/si2168.c:753:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dev->fe.ops, &si2168_ops, sizeof(struct dvb_frontend_ops= )); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 28 warnings generated. drivers/mtd/inftlmount.c:104:3: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(mh, buf, sizeof(struct INFTLMediaHeader)); ^~~~~~ drivers/mtd/inftlmount.c:104:3: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(mh, buf, sizeof(struct INFTLMediaHeader)); ^~~~~~ drivers/mtd/inftlmount.c:371:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(instr, 0, sizeof(struct erase_info)); ^~~~~~ drivers/mtd/inftlmount.c:371:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(instr, 0, sizeof(struct erase_info)); ^~~~~~ drivers/mtd/inftlmount.c:550:2: warning: Value stored to 'logical_block'= is never read [clang-analyzer-deadcode.DeadStores] logical_block =3D block =3D BLOCK_NIL; ^ ~~~~~~~~~~~~~~~~~ drivers/mtd/inftlmount.c:550:2: note: Value stored to 'logical_block' is= never read logical_block =3D block =3D BLOCK_NIL; ^ ~~~~~~~~~~~~~~~~~ drivers/mtd/inftlmount.c:550:18: warning: Although the value stored to '= block' is used in the enclosing expression, the value is never actually rea= d from 'block' [clang-analyzer-deadcode.DeadStores] logical_block =3D block =3D BLOCK_NIL; ^ drivers/mtd/inftlmount.c:550:18: note: Although the value stored to 'blo= ck' is used in the enclosing expression, the value is never actually read f= rom 'block' drivers/mtd/inftlmount.c:693:3: warning: Value stored to 'logical_block'= is never read [clang-analyzer-deadcode.DeadStores] logical_block =3D BLOCK_NIL; ^ drivers/mtd/inftlmount.c:693:3: note: Value stored to 'logical_block' is= never read Suppressed 23 warnings (23 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 52 warnings generated. drivers/media/dvb-frontends/zd1301_demod.c:40:26: warning: Value stored = to 'pdev' during its initialization is never read [clang-analyzer-deadcode.= DeadStores] struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:40:26: note: Value stored to = 'pdev' during its initialization is never read struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:148:26: warning: Value stored= to 'pdev' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:148:26: note: Value stored to= 'pdev' during its initialization is never read struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:181:26: warning: Value stored= to 'pdev' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:181:26: note: Value stored to= 'pdev' during its initialization is never read struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:215:26: warning: Value stored= to 'pdev' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:215:26: note: Value stored to= 'pdev' during its initialization is never read struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:229:26: warning: Value stored= to 'pdev' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:229:26: note: Value stored to= 'pdev' during its initialization is never read struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:313:26: warning: Value stored= to 'pdev' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:313:26: note: Value stored to= 'pdev' during its initialization is never read struct platform_device *pdev =3D dev->pdev; ^~~~ ~~~~~~~~~ >> drivers/media/dvb-frontends/zd1301_demod.c:505:2: warning: Call to funct= ion 'memcpy' is insecure as it does not provide security checks introduced = in the C11 standard. Replace with analogous functions that support length a= rguments or provides boundary checks such as 'memcpy_s' in case of C11 [cla= ng-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->frontend.ops, &zd1301_demod_ops, sizeof(dev->fronte= nd.ops)); ^~~~~~ drivers/media/dvb-frontends/zd1301_demod.c:505:2: note: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dev->frontend.ops, &zd1301_demod_ops, sizeof(dev->fronte= nd.ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. fs/xfs/libxfs/xfs_dir2_data.c:239:20: warning: Access to field 'count' r= esults in a dereference of a null pointer (loaded from variable 'btp') [cla= ng-analyzer-core.NullDereference] for (i =3D 0; i < be32_to_cpu(btp->count); i++) { ^ include/linux/byteorder/generic.h:95:21: note: expanded from macro 'be32= _to_cpu' #define be32_to_cpu __be32_to_cpu ^ include/uapi/linux/byteorder/little_endian.h:41:58: note: expanded from = macro '__be32_to_cpu' #define __be32_to_cpu(x) __swab32((__force __u32)(__be32)(x)) ^ fs/xfs/libxfs/xfs_dir2_data.c:365:7: note: Calling 'xfs_dir3_data_verify' fa =3D xfs_dir3_data_verify(bp); ^~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:297:6: note: Assuming the condition is fal= se if (!xfs_verify_magic(bp, hdr3->magic)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:297:2: note: Taking false branch if (!xfs_verify_magic(bp, hdr3->magic)) ^ fs/xfs/libxfs/xfs_dir2_data.c:300:6: note: Assuming the condition is fal= se if (xfs_has_crc(mp)) { ^~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:300:2: note: Taking false branch if (xfs_has_crc(mp)) { ^ fs/xfs/libxfs/xfs_dir2_data.c:308:9: note: Calling '__xfs_dir3_data_chec= k' return __xfs_dir3_data_check(NULL, bp); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:104:2: note: 'btp' initialized to a null p= ointer value xfs_dir2_block_tail_t *btp=3DNULL; /* block tail */ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:123:6: note: 'dp' is null if (dp && !S_ISDIR(VFS_I(dp)->i_mode)) ^~ fs/xfs/libxfs/xfs_dir2_data.c:123:9: note: Left side of '&&' is false if (dp && !S_ISDIR(VFS_I(dp)->i_mode)) ^ fs/xfs/libxfs/xfs_dir2_data.c:129:2: note: Control jumps to 'case 860111= 960:' at line 139 switch (hdr->magic) { ^ fs/xfs/libxfs/xfs_dir2_data.c:141:3: note: Execution continues on line = 145 break; ^ fs/xfs/libxfs/xfs_dir2_data.c:145:8: note: Calling 'xfs_dir3_data_end_of= fset' end =3D xfs_dir3_data_end_offset(geo, hdr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:1212:2: note: Control jumps to 'case 86011= 1960:' at line 1217 switch (hdr->magic) { ^ fs/xfs/libxfs/xfs_dir2_data.c:1219:3: note: Returning without writing to= 'geo->blksize', which participates in a condition later return geo->blksize; ^ fs/xfs/libxfs/xfs_dir2_data.c:1219:3: note: Returning value, which parti= cipates in a condition later return geo->blksize; ^~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:145:8: note: Returning from 'xfs_dir3_data= _end_offset' end =3D xfs_dir3_data_end_offset(geo, hdr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:146:6: note: Assuming 'end' is not equal t= o 0 if (!end) ^~~~ fs/xfs/libxfs/xfs_dir2_data.c:146:2: note: Taking false branch if (!end) ^ fs/xfs/libxfs/xfs_dir2_data.c:154:6: note: Assuming field 'length' is no= t equal to 0 if (!bf[0].length) { ^~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:154:2: note: Taking false branch if (!bf[0].length) { ^ fs/xfs/libxfs/xfs_dir2_data.c:159:6: note: Assuming field 'length' is no= t equal to 0 if (!bf[1].length) { ^~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:159:2: note: Taking false branch if (!bf[1].length) { ^ fs/xfs/libxfs/xfs_dir2_data.c:164:6: note: Assuming field 'length' is no= t equal to 0 if (!bf[2].length) { ^~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_data.c:164:2: note: Taking false branch if (!bf[2].length) { ^ fs/xfs/libxfs/xfs_dir2_data.c:170:6: note: Assuming the condition is fal= se if (be16_to_cpu(bf[0].length) < be16_to_cpu(bf[1].length)) ^ include/linux/byteorder/generic.h:97:21: note: expanded from macro 'be16= _to_cpu' #define be16_to_cpu __be16_to_cpu ^ include/uapi/linux/byteorder/little_endian.h:43:26: note: expanded from = macro '__be16_to_cpu' #define __be16_to_cpu(x) __swab16((__force __u16)(__be16)(x)) ^ include/uapi/linux/swab.h:102:21: note: expanded from macro '__swab16' #define __swab16(x) (__u16)__builtin_bswap16((__u16)(x)) -- ^ drivers/media/dvb-frontends/cxd2099.c:74:2: note: Returning without writ= ing to '*data' return status; ^ drivers/media/dvb-frontends/cxd2099.c:79:9: note: Returning from 'read_b= lock' return read_block(ci, reg, val, 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2099.c:79:2: note: Returning without writ= ing to '*val' return read_block(ci, reg, val, 1); ^ drivers/media/dvb-frontends/cxd2099.c:506:3: note: Returning from 'read_= reg' read_reg(ci, 0x01, &slotstat); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2099.c:507:11: note: The right operand of= '&' is a garbage value if (!(2 & slotstat)) { ^ ~~~~~~~~ drivers/media/dvb-frontends/cxd2099.c:620:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&ci->cfg, cfg, sizeof(ci->cfg)); ^~~~~~ drivers/media/dvb-frontends/cxd2099.c:620:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&ci->cfg, cfg, sizeof(ci->cfg)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 53 warnings generated. drivers/media/i2c/ov2659.c:895:21: warning: Value stored to 'client' dur= ing its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D ov2659->client; ^~~~~~ ~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:895:21: note: Value stored to 'client' during= its initialization is never read struct i2c_client *client =3D ov2659->client; ^~~~~~ ~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:986:21: warning: Value stored to 'client' dur= ing its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:986:21: note: Value stored to 'client' during= its initialization is never read struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1002:21: warning: Value stored to 'client' du= ring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1002:21: note: Value stored to 'client' durin= g its initialization is never read struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1028:21: warning: Value stored to 'client' du= ring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1028:21: note: Value stored to 'client' durin= g its initialization is never read struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1151:21: warning: Value stored to 'client' du= ring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D ov2659->client; ^~~~~~ ~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1151:21: note: Value stored to 'client' durin= g its initialization is never read struct i2c_client *client =3D ov2659->client; ^~~~~~ ~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1160:21: warning: Value stored to 'client' du= ring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D ov2659->client; ^~~~~~ ~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1160:21: note: Value stored to 'client' durin= g its initialization is never read struct i2c_client *client =3D ov2659->client; ^~~~~~ ~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1312:21: warning: Value stored to 'client' du= ring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov2659.c:1312:21: note: Value stored to 'client' durin= g its initialization is never read struct i2c_client *client =3D v4l2_get_subdevdata(sd); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/base/firmware_loader/main.c:270:3: warning: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(new_pages, fw_priv->pages, ^~~~~~ drivers/base/firmware_loader/main.c:270:3: note: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 memcpy(new_pages, fw_priv->pages, ^~~~~~ drivers/base/firmware_loader/main.c:272:3: warning: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&new_pages[fw_priv->page_array_size], 0, sizeof(v= oid *) * ^~~~~~ drivers/base/firmware_loader/main.c:272:3: note: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 memset(&new_pages[fw_priv->page_array_size], 0, sizeof(v= oid *) * ^~~~~~ drivers/base/firmware_loader/main.c:458:9: warning: Call to function 'sn= printf' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'snprintf_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] len =3D snprintf(path, PATH_MAX, "%s/%s%s", ^~~~~~~~ drivers/base/firmware_loader/main.c:458:9: note: Call to function 'snpri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'snprintf_s' in case of C11 len =3D snprintf(path, PATH_MAX, "%s/%s%s", ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 10 warnings generated. Suppressed 10 warnings (10 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 10 warnings generated. Suppressed 10 warnings (10 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. >> drivers/media/common/siano/smsir.c:55:2: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(coredev->ir.name, sizeof(coredev->ir.name), ^~~~~~~~ drivers/media/common/siano/smsir.c:55:2: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(coredev->ir.name, sizeof(coredev->ir.name), ^~~~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. >> drivers/media/common/siano/smsdvb-main.c:1153:2: warning: Call to functi= on 'memcpy' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memcpy_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&client->frontend.ops, &smsdvb_fe_ops, ^~~~~~ drivers/media/common/siano/smsdvb-main.c:1153:2: note: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&client->frontend.ops, &smsdvb_fe_ops, ^~~~~~ Suppressed 49 warnings (47 in non-user code, 2 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 38 warnings generated. drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:91:2: warning: Call to fun= ction 'memset' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memset_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(tpg, 0, sizeof(*tpg)); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:91:2: note: Call to functi= on 'memset' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memset_s' in case of C11 memset(tpg, 0, sizeof(*tpg)); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:598:6: warning: Division b= y zero [clang-analyzer-core.DivideZero] aux /=3D diff_rgb; ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:856:6: note: Assuming 'k' = is not equal to TPG_COLOR_TEXTBG if (k =3D=3D TPG_COLOR_TEXTBG) { ^~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:856:2: note: Taking false = branch if (k =3D=3D TPG_COLOR_TEXTBG) { ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:862:13: note: Assuming 'k'= is not equal to TPG_COLOR_TEXTFG } else if (k =3D=3D TPG_COLOR_TEXTFG) { ^~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:862:9: note: Taking false = branch } else if (k =3D=3D TPG_COLOR_TEXTFG) { ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:868:13: note: Assuming fie= ld 'pattern' is not equal to TPG_PAT_NOISE } else if (tpg->pattern =3D=3D TPG_PAT_NOISE) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:868:9: note: Taking false = branch } else if (tpg->pattern =3D=3D TPG_PAT_NOISE) { ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:870:13: note: Assuming 'k'= is not equal to TPG_COLOR_RANDOM } else if (k =3D=3D TPG_COLOR_RANDOM) { ^~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:870:9: note: Taking false = branch } else if (k =3D=3D TPG_COLOR_RANDOM) { ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:872:13: note: Assuming 'k'= is < TPG_COLOR_RAMP } else if (k >=3D TPG_COLOR_RAMP) { ^~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:872:9: note: Taking false = branch } else if (k >=3D TPG_COLOR_RAMP) { ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:876:6: note: Assuming fiel= d 'pattern' is not equal to TPG_PAT_CSC_COLORBAR if (tpg->pattern =3D=3D TPG_PAT_CSC_COLORBAR && col <=3D TPG_COL= OR_CSC_BLACK) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:876:43: note: Left side of= '&&' is false if (tpg->pattern =3D=3D TPG_PAT_CSC_COLORBAR && col <=3D TPG_COL= OR_CSC_BLACK) { ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:886:6: note: Assuming fiel= d 'qual' is not equal to TPG_QUAL_GRAY if (tpg->qual =3D=3D TPG_QUAL_GRAY || ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:886:6: note: Left side of = '||' is false drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:887:6: note: Assuming fiel= d 'color_enc' is not equal to TGP_COLOR_ENC_LUMA tpg->color_enc =3D=3D TGP_COLOR_ENC_LUMA) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:886:2: note: Taking false = branch if (tpg->qual =3D=3D TPG_QUAL_GRAY || ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:900:6: note: Assuming fiel= d 'real_rgb_range' is not equal to V4L2_DV_RGB_RANGE_LIMITED if (tpg->real_rgb_range =3D=3D V4L2_DV_RGB_RANGE_LIMITED && ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:900:55: note: Left side of= '&&' is false if (tpg->real_rgb_range =3D=3D V4L2_DV_RGB_RANGE_LIMITED && ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:911:18: note: Field 'real_= rgb_range' is not equal to V4L2_DV_RGB_RANGE_LIMITED } else if (tpg->real_rgb_range !=3D V4L2_DV_RGB_RANGE_LIMITED && ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:911:13: note: Left side of= '&&' is true } else if (tpg->real_rgb_range !=3D V4L2_DV_RGB_RANGE_LIMITED && ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:912:6: note: Assuming fiel= d 'rgb_range' is not equal to V4L2_DV_RGB_RANGE_LIMITED tpg->rgb_range =3D=3D V4L2_DV_RGB_RANGE_LIMITED && ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:912:50: note: Left side of= '&&' is false tpg->rgb_range =3D=3D V4L2_DV_RGB_RANGE_LIMITED && ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:927:7: note: Assuming fiel= d 'brightness' is equal to 128 if ((tpg->brightness !=3D 128 || tpg->contrast !=3D 128 || ^~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:927:7: note: Left side of = '||' is false drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:927:33: note: Assuming fie= ld 'contrast' is equal to 128 if ((tpg->brightness !=3D 128 || tpg->contrast !=3D 128 || ^~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:927:7: note: Left side of = '||' is false if ((tpg->brightness !=3D 128 || tpg->contrast !=3D 128 || ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:928:7: note: Assuming fiel= d 'saturation' is equal to 128 tpg->saturation !=3D 128 || tpg->hue) && ^~~~~~~~~~~~~~~~~~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:927:7: note: Left side of = '||' is false if ((tpg->brightness !=3D 128 || tpg->contrast !=3D 128 || ^ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:928:33: note: Assuming fie= ld 'hue' is 0 tpg->saturation !=3D 128 || tpg->hue) && ^~~~~~~~ -- ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2354:3: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf + params->right_pillar_start, tpg->black_lin= e[p], ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2373:3: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf + left, tpg->contrast_line[p], width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2373:3: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf + left, tpg->contrast_line[p], width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2527:4: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf, linestart_top, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2527:4: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf, linestart_top, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2529:4: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf, linestart_bottom, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2529:4: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf, linestart_bottom, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2533:4: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf, linestart_bottom, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2533:4: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf, linestart_bottom, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2535:4: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf, linestart_top, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2535:4: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf, linestart_top, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2538:3: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf, linestart_top, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2538:3: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf, linestart_top, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2541:3: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf, linestart_bottom, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2541:3: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf, linestart_bottom, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2545:3: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(vbuf, linestart_older, img_width); ^~~~~~ drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2545:3: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(vbuf, linestart_older, img_width); ^~~~~~ Suppressed 10 warnings (9 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/base/firmware_loader/fallback.c:314:3: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, fw_priv->data + offset, count); ^~~~~~ drivers/base/firmware_loader/fallback.c:314:3: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(buffer, fw_priv->data + offset, count); ^~~~~~ drivers/base/firmware_loader/fallback.c:316:3: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(fw_priv->data + offset, buffer, count); ^~~~~~ drivers/base/firmware_loader/fallback.c:316:3: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(fw_priv->data + offset, buffer, count); ^~~~~~ drivers/base/firmware_loader/fallback.c:331:4: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer, page_data + page_ofs, page_cnt); ^~~~~~ drivers/base/firmware_loader/fallback.c:331:4: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(buffer, page_data + page_ofs, page_cnt); ^~~~~~ drivers/base/firmware_loader/fallback.c:333:4: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(page_data + page_ofs, buffer, page_cnt); ^~~~~~ drivers/base/firmware_loader/fallback.c:333:4: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(page_data + page_ofs, buffer, page_cnt); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/input/joystick/interact.c:235:2: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(interact->phys, sizeof(interact->phys), "%s/input0", ga= meport->phys); ^~~~~~~~ drivers/input/joystick/interact.c:235:2: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(interact->phys, sizeof(interact->phys), "%s/input0", ga= meport->phys); ^~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/input/joystick/magellan.c:144:2: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(magellan->phys, sizeof(magellan->phys), "%s/input0", se= rio->phys); ^~~~~~~~ drivers/input/joystick/magellan.c:144:2: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(magellan->phys, sizeof(magellan->phys), "%s/input0", se= rio->phys); ^~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. >> drivers/input/joystick/spaceball.c:211:2: warning: Call to function 'snp= rintf' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'snprintf_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(spaceball->phys, sizeof(spaceball->phys), "%s/input0", = serio->phys); ^~~~~~~~ drivers/input/joystick/spaceball.c:211:2: note: Call to function 'snprin= tf' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(spaceball->phys, sizeof(spaceball->phys), "%s/input0", = serio->phys); ^~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 53 warnings generated. drivers/scsi/libsas/sas_discover.c:68:2: warning: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dev->frame_rcvd, phy->frame_rcvd, min(sizeof(dev->frame_r= cvd), ^~~~~~ drivers/scsi/libsas/sas_discover.c:68:2: note: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 memcpy(dev->frame_rcvd, phy->frame_rcvd, min(sizeof(dev->frame_r= cvd), ^~~~~~ drivers/scsi/libsas/sas_discover.c:134:2: warning: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dev->sas_addr, port->attached_sas_addr, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:134:2: note: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 memcpy(dev->sas_addr, port->attached_sas_addr, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:142:2: warning: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(port->disc.fanout_sas_addr, 0, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:142:2: note: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 memset(port->disc.fanout_sas_addr, 0, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:143:2: warning: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(port->disc.eeds_a, 0, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:143:2: note: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 memset(port->disc.eeds_a, 0, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:144:2: warning: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(port->disc.eeds_b, 0, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:144:2: note: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 memset(port->disc.eeds_b, 0, SAS_ADDR_SIZE); ^~~~~~ drivers/scsi/libsas/sas_discover.c:248:2: warning: Use of memory after i= t is freed [clang-analyzer-unix.Malloc] list_for_each_entry(dev, &port->dev_list, dev_list_node) ^ include/linux/list.h:640:13: note: expanded from macro 'list_for_each_en= try' pos =3D list_next_entry(pos, member)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:564:2: note: expanded from macro 'list_next_entry' list_entry((pos)->member.next, typeof(*(pos)), member) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:520:2: note: expanded from macro 'list_entry' container_of(ptr, type, member) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/container_of.h:18:25: note: expanded from macro 'container= _of' void *__mptr =3D (void *)(ptr); = \ ^~~~~ drivers/scsi/libsas/sas_discover.c:240:2: note: '?' condition is true clear_bit(DISCE_SUSPEND, &port->disc.pending); ^ arch/arm/include/asm/bitops.h:190:27: note: expanded from macro 'clear_b= it' #define clear_bit(nr,p) ATOMIC_BITOP(clear_bit,nr,p) ^ arch/arm/include/asm/bitops.h:181:3: note: expanded from macro 'ATOMIC_B= ITOP' (__builtin_constant_p(nr) ? ____atomic_##name(nr, p) : _##name(n= r,p)) ^ drivers/scsi/libsas/sas_discover.c:248:2: note: Loop condition is true. = Entering loop body list_for_each_entry(dev, &port->dev_list, dev_list_node) ^ include/linux/list.h:638:2: note: expanded from macro 'list_for_each_ent= ry' for (pos =3D list_first_entry(head, typeof(*pos), member); = \ ^ drivers/scsi/libsas/sas_discover.c:249:3: note: Calling 'sas_notify_lldd= _dev_gone' sas_notify_lldd_dev_gone(dev); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/libsas/sas_discover.c:198:6: note: Assuming field 'lldd_dev= _gone' is non-null if (!i->dft->lldd_dev_gone) ^~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/libsas/sas_discover.c:198:2: note: Taking false branch if (!i->dft->lldd_dev_gone) ^ drivers/scsi/libsas/sas_discover.c:201:6: note: '?' condition is true if (test_and_clear_bit(SAS_DEV_FOUND, &dev->state)) { ^ arch/arm/include/asm/bitops.h:193:34: note: expanded from macro 'test_an= d_clear_bit' #define test_and_clear_bit(nr,p) ATOMIC_BITOP(test_and_clear_bit,= nr,p) ^ arch/arm/include/asm/bitops.h:181:3: note: expanded from macro 'ATOMIC_B= ITOP' (__builtin_constant_p(nr) ? ____atomic_##name(nr, p) : _##name(n= r,p)) ^ drivers/scsi/libsas/sas_discover.c:201:6: note: Assuming the condition i= s true if (test_and_clear_bit(SAS_DEV_FOUND, &dev->state)) { ^ arch/arm/include/asm/bitops.h:193:34: note: expanded from macro 'test_an= d_clear_bit' #define test_and_clear_bit(nr,p) ATOMIC_BITOP(test_and_clear_bit,= nr,p) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~ arch/arm/include/asm/bitops.h:181:3: note: expanded from macro 'ATOMIC_B= ITOP' (__builtin_constant_p(nr) ? ____atomic_##name(nr, p) : _##name(n= r,p)) ^~~~~~~~~~~~~~~~~~~~ drivers/scsi/libsas/sas_discover.c:201:2: note: Taking true branch if (test_and_clear_bit(SAS_DEV_FOUND, &dev->state)) { -- 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. drivers/pcmcia/ds.c:105:11: warning: Call to function 'sscanf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] fields =3D sscanf(buf, "%hx %hx %hx %hhx %hhx %hhx %x %x %x %x", ^~~~~~ drivers/pcmcia/ds.c:105:11: note: Call to function 'sscanf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sscanf_s' in case of C11 fields =3D sscanf(buf, "%hx %hx %hx %hhx %hhx %hhx %x %x %x %x", ^~~~~~ drivers/pcmcia/ds.c:121:2: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dynid->id.prod_id_hash, prod_id_hash, sizeof(__u32) * 4); ^~~~~~ drivers/pcmcia/ds.c:121:2: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(dynid->id.prod_id_hash, prod_id_hash, sizeof(__u32) * 4); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 64 warnings generated. Suppressed 64 warnings (64 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 42 warnings generated. drivers/pcmcia/cistpl.c:155:4: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:155:4: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:172:4: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:172:4: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:188:5: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:188:5: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:299:4: warning: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ptr, s->fake_cis+addr, len); ^~~~~~ drivers/pcmcia/cistpl.c:299:4: note: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 memcpy(ptr, s->fake_cis+addr, len); ^~~~~~ drivers/pcmcia/cistpl.c:301:4: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:301:4: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(ptr, 0xff, len); ^~~~~~ drivers/pcmcia/cistpl.c:310:4: warning: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ptr, cis->cache, len); ^~~~~~ drivers/pcmcia/cistpl.c:310:4: note: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 memcpy(ptr, cis->cache, len); ^~~~~~ drivers/pcmcia/cistpl.c:325:4: warning: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(cis->cache, ptr, len); ^~~~~~ drivers/pcmcia/cistpl.c:325:4: note: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 memcpy(cis->cache, ptr, len); ^~~~~~ drivers/pcmcia/cistpl.c:426:2: warning: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(s->fake_cis, data, len); ^~~~~~ drivers/pcmcia/cistpl.c:426:2: note: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 memcpy(s->fake_cis, data, len); ^~~~~~ drivers/pcmcia/cistpl.c:1493:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&tuple, 0, sizeof(tuple_t)); ^~~~~~ drivers/pcmcia/cistpl.c:1493:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(&tuple, 0, sizeof(tuple_t)); ^~~~~~ drivers/pcmcia/cistpl.c:1503:3: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(tuplebuffer, 0, sizeof(u_char) * 255); ^~~~~~ drivers/pcmcia/cistpl.c:1503:3: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(tuplebuffer, 0, sizeof(u_char) * 255); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/dvb-pll.c:832:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &dvb_pll_tuner_ops, ^~~~~~ drivers/media/dvb-frontends/dvb-pll.c:832:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &dvb_pll_tuner_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/stv0299.c:695:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &stv0299_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/stv0299.c:695:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &stv0299_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/stb0899_drv.c:504:2: warning: Call to functi= on 'memcpy' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memcpy_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf[2], data, count); ^~~~~~ drivers/media/dvb-frontends/stb0899_drv.c:504:2: note: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf[2], data, count); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/media/dvb-frontends/stb0899_algo.c:218:4: warning: The left oper= and of '&' is a garbage value [clang-analyzer-core.UndefinedBinaryOperatorR= esult] STB0899_SETFIELD_VAL(CFRM, cfr[0], MSB(internal-= >inversion * derot_freq)); ^ drivers/media/dvb-frontends/stb0899_priv.h:61:61: note: expanded from ma= cro 'STB0899_SETFIELD_VAL' #define STB0899_SETFIELD_VAL(bitf, mask, val) (mask =3D (mask & (~(((1= << STB0899_WIDTH_##bitf) - 1) <<\ ^ drivers/media/dvb-frontends/stb0899_algo.c:515:6: note: Assuming field '= srate' is > 5000000 if (params->srate <=3D 5000000) { ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stb0899_algo.c:515:2: note: Taking false bra= nch if (params->srate <=3D 5000000) { ^ drivers/media/dvb-frontends/stb0899_algo.c:521:13: note: Assuming field = 'srate' is > 15000000 } else if (params->srate <=3D 15000000) { ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stb0899_algo.c:521:9: note: Taking false bra= nch } else if (params->srate <=3D 15000000) { ^ drivers/media/dvb-frontends/stb0899_algo.c:527:12: note: Assuming field = 'srate' is > 25000000 } else if(params->srate <=3D 25000000) { ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stb0899_algo.c:527:9: note: Taking false bra= nch } else if(params->srate <=3D 25000000) { ^ drivers/media/dvb-frontends/stb0899_algo.c:541:2: note: Taking true bran= ch dprintk(state->verbose, FE_DEBUG, 1, "Set the timing loop to acq= uisition"); ^ drivers/media/dvb-frontends/stb0899_priv.h:23:2: note: expanded from mac= ro 'dprintk' if (z) { = \ ^ drivers/media/dvb-frontends/stb0899_algo.c:541:2: note: Assuming the con= dition is true dprintk(state->verbose, FE_DEBUG, 1, "Set the timing loop to acq= uisition"); ^ drivers/media/dvb-frontends/stb0899_priv.h:24:8: note: expanded from mac= ro 'dprintk' if ((*x > FE_ERROR) && (*x > y)) = \ ^~~~~~~~~~~~~ drivers/media/dvb-frontends/stb0899_algo.c:541:2: note: Left side of '&&= ' is true dprintk(state->verbose, FE_DEBUG, 1, "Set the timing loop to acq= uisition"); ^ drivers/media/dvb-frontends/stb0899_priv.h:24:7: note: expanded from mac= ro 'dprintk' if ((*x > FE_ERROR) && (*x > y)) = \ ^ drivers/media/dvb-frontends/stb0899_algo.c:541:2: note: Assuming the con= dition is true dprintk(state->verbose, FE_DEBUG, 1, "Set the timing loop to acq= uisition"); ^ drivers/media/dvb-frontends/stb0899_priv.h:24:27: note: expanded from ma= cro 'dprintk' if ((*x > FE_ERROR) && (*x > y)) = \ ^~~~~~ drivers/media/dvb-frontends/stb0899_algo.c:541:2: note: Taking true bran= ch dprintk(state->verbose, FE_DEBUG, 1, "Set the timing loop to acq= uisition"); ^ drivers/media/dvb-frontends/stb0899_priv.h:24:3: note: expanded from mac= ro 'dprintk' if ((*x > FE_ERROR) && (*x > y)) = \ ^ drivers/media/dvb-frontends/stb0899_algo.c:541:2: note: Loop condition i= s false. Exiting loop dprintk(state->verbose, FE_DEBUG, 1, "Set the timing loop to acq= uisition"); ^ drivers/media/dvb-frontends/stb0899_priv.h:25:4: note: expanded from mac= ro 'dprintk' printk(KERN_ERR "%s: " format "\n", __func__ , #= #arg); \ ^ include/linux/printk.h:446:26: note: expanded from macro 'printk' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) ^ include/linux/printk.h:417:3: note: expanded from macro 'printk_index_wr= ap' __printk_index_emit(_fmt, NULL, NULL); \ ^ include/linux/printk.h:392:34: note: expanded from macro '__printk_index= _emit' #define __printk_index_emit(...) do {} while (0) ^ drivers/media/dvb-frontends/stb0899_algo.c:541:2: note: Loop condition i= s false. Exiting loop dprintk(state->verbose, FE_DEBUG, 1, "Set the timing loop to acq= uisition"); ^ drivers/media/dvb-frontends/stb0899_priv.h:22:42: note: expanded from ma= cro 'dprintk' #define dprintk(x, y, z, format, arg...) do { = \ ^ drivers/media/dvb-frontends/stb0899_algo.c:552:2: note: Taking true bran= ch dprintk(state->verbose, FE_DEBUG, 1, "Derot Percent=3D%d Srate= =3D%d mclk=3D%d", ^ drivers/media/dvb-frontends/stb0899_priv.h:23:2: note: expanded from mac= ro 'dprintk' if (z) { = \ ^ drivers/media/dvb-frontends/stb0899_algo.c:552:2: note: Assuming the con= dition is false dprintk(state->verbose, FE_DEBUG, 1, "Derot Percent=3D%d Srate= =3D%d mclk=3D%d", -- ^ include/linux/dev_printk.h:162:2: note: expanded from macro 'dev_dbg' if (0) \ ^ drivers/media/i2c/ov5647.c:625:3: note: Returning without writing to '*v= al' return ret; ^ drivers/media/i2c/ov5647.c:809:8: note: Returning from 'ov5647_read' ret =3D ov5647_read(&sensor->sd, OV5647_SW_STANDBY, &rdval); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ov5647.c:810:6: note: 'ret' is < 0 if (ret < 0) ^~~ drivers/media/i2c/ov5647.c:810:2: note: Taking true branch if (ret < 0) ^ drivers/media/i2c/ov5647.c:811:3: note: Taking false branch dev_dbg(dev, "software standby failed\n"); ^ include/linux/dev_printk.h:162:2: note: expanded from macro 'dev_dbg' if (0) \ ^ drivers/media/i2c/ov5647.c:813:8: note: The left expression of the compo= und assignment is an uninitialized value. The computed value will also be g= arbage rdval &=3D ~0x01; ~~~~~ ^ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/hwmon/mcp3021.c:98:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", in_input); ^~~~~~~ drivers/hwmon/mcp3021.c:98:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", in_input); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. drivers/hwmon/tc654.c:209:9: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwmon/tc654.c:209:9: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwmon/tc654.c:221:9: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", ^~~~~~~ drivers/hwmon/tc654.c:221:9: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", ^~~~~~~ drivers/hwmon/tc654.c:264:9: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwmon/tc654.c:264:9: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwmon/tc654.c:280:9: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwmon/tc654.c:280:9: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwmon/tc654.c:332:9: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", !!(data->config & TC654_REG_CONFIG_D= UTYC)); ^~~~~~~ drivers/hwmon/tc654.c:332:9: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", !!(data->config & TC654_REG_CONFIG_D= UTYC)); ^~~~~~~ drivers/hwmon/tc654.c:379:9: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", pwm); ^~~~~~~ drivers/hwmon/tc654.c:379:9: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", pwm); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/i2c/busses/i2c-pca-platform.c:161:2: warning: Call to function '= snprintf' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'snprintf_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(i2c->adap.name, sizeof(i2c->adap.name), ^~~~~~~~ drivers/i2c/busses/i2c-pca-platform.c:161:2: note: Call to function 'snp= rintf' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(i2c->adap.name, sizeof(i2c->adap.name), ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/i2c/busses/i2c-rk3x.c:897:2: warning: Value stored to 't_low_ns'= is never read [clang-analyzer-deadcode.DeadStores] t_low_ns =3D div_u64(((u64)calc.div_low + 1) * 8 * 1000000000, c= lk_rate); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~ drivers/i2c/busses/i2c-rk3x.c:897:2: note: Value stored to 't_low_ns' is= never read t_low_ns =3D div_u64(((u64)calc.div_low + 1) * 8 * 1000000000, c= lk_rate); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~ drivers/i2c/busses/i2c-rk3x.c:898:2: warning: Value stored to 't_high_ns= ' is never read [clang-analyzer-deadcode.DeadStores] t_high_ns =3D div_u64(((u64)calc.div_high + 1) * 8 * 1000000000, ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/i2c/busses/i2c-rk3x.c:898:2: note: Value stored to 't_high_ns' i= s never read t_high_ns =3D div_u64(((u64)calc.div_high + 1) * 8 * 1000000000, ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. >> drivers/i2c/busses/i2c-s3c2410.c:1075:3: warning: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(i2c->pdata, pdata, sizeof(*pdata)); ^~~~~~ drivers/i2c/busses/i2c-s3c2410.c:1075:3: note: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 memcpy(i2c->pdata, pdata, sizeof(*pdata)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 51 warnings generated. drivers/media/dvb-frontends/cxd2820r_c.c:14:21: warning: Value stored to= 'client' during its initialization is never read [clang-analyzer-deadcode.= DeadStores] struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:14:21: note: Value stored to 'c= lient' during its initialization is never read struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:15:34: warning: Value stored to= 'c' during its initialization is never read [clang-analyzer-deadcode.DeadS= tores] struct dtv_frontend_properties *c =3D &fe->dtv_property_cache; ^ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:15:34: note: Value stored to 'c= ' during its initialization is never read struct dtv_frontend_properties *c =3D &fe->dtv_property_cache; ^ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:92:21: warning: Value stored to= 'client' during its initialization is never read [clang-analyzer-deadcode.= DeadStores] struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:92:21: note: Value stored to 'c= lient' during its initialization is never read struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:145:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:145:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:281:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:281:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:299:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cxd2820r_c.c:299:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D priv->client[0]; ^~~~~~ ~~~~~~~~~~~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/s921.c:492:2: warning: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &s921_ops, ^~~~~~ drivers/media/dvb-frontends/s921.c:492:2: note: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &s921_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. drivers/media/dvb-frontends/stv6110.c:79:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&cmdbuf[1], buf, len); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:79:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&cmdbuf[1], buf, len); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:125:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&priv->regs[start], regs, len); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:125:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&priv->regs[start], regs, len); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:206:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(priv->regs, buf0, 8); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:206:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(priv->regs, buf0, 8); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:421:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&priv->regs, ®0[1], 8); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:421:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&priv->regs, ®0[1], 8); ^~~~~~ drivers/media/dvb-frontends/stv6110.c:423:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &stv6110_tuner_ops, ^~~~~~ drivers/media/dvb-frontends/stv6110.c:423:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &stv6110_tuner_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 62 warnings generated. fs/f2fs/recovery.c:124:2: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(fname, 0, sizeof(*fname)); ^~~~~~ fs/f2fs/recovery.c:124:2: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(fname, 0, sizeof(*fname)); ^~~~~~ fs/f2fs/recovery.c:252:2: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&attr, 0, sizeof(attr)); -- ^ drivers/mtd/chips/cfi_util.c:114:21: note: The result of the left shift = is undefined due to shifting by '64', which is greater or equal to the widt= h of type 'unsigned long' onecmd |=3D (onecmd << (chip_mode * 16)); ^ ~~~~~~~~~~~~~~~~ drivers/mtd/chips/cfi_util.c:117:21: warning: The result of the left shi= ft is undefined due to shifting by '32', which is greater or equal to the w= idth of type 'unsigned long' [clang-analyzer-core.UndefinedBinaryOperatorRe= sult] onecmd |=3D (onecmd << (chip_mode * 8)); ^ drivers/mtd/chips/cfi_util.c:307:6: note: Assuming 'adr' is not equal to= 0 if (!adr) ^~~~ drivers/mtd/chips/cfi_util.c:307:2: note: Taking false branch if (!adr) ^ drivers/mtd/chips/cfi_util.c:310:2: note: Loop condition is false. Exit= ing loop printk(KERN_INFO "%s Extended Query Table@0x%4.4X\n", name, a= dr); ^ include/linux/printk.h:446:26: note: expanded from macro 'printk' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) ^ include/linux/printk.h:417:3: note: expanded from macro 'printk_index_wr= ap' __printk_index_emit(_fmt, NULL, NULL); \ ^ include/linux/printk.h:392:34: note: expanded from macro '__printk_index= _emit' #define __printk_index_emit(...) do {} while (0) ^ drivers/mtd/chips/cfi_util.c:313:6: note: Assuming 'extp' is non-null if (!extp) ^~~~~ drivers/mtd/chips/cfi_util.c:313:2: note: Taking false branch if (!extp) ^ drivers/mtd/chips/cfi_util.c:321:2: note: Calling 'cfi_qry_mode_on' cfi_qry_mode_on(base, map, cfi); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/chips/cfi_util.c:251:2: note: Calling 'cfi_send_gen_cmd' cfi_send_gen_cmd(0xF0, 0, base, map, cfi, cfi->device_type, NULL= ); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/chips/cfi_util.c:209:8: note: Calling 'cfi_build_cmd' val =3D cfi_build_cmd(cmd, map, cfi); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/chips/cfi_util.c:78:2: note: Taking false branch if (map_bankwidth_is_large(map)) { ^ drivers/mtd/chips/cfi_util.c:91:2: note: Control jumps to 'case 4:' at = line 99 switch (chip_mode) { ^ drivers/mtd/chips/cfi_util.c:100:12: note: '?' condition is true onecmd =3D cpu_to_cfi32(map, cmd); ^ include/linux/mtd/cfi_endian.h:30:30: note: expanded from macro 'cpu_to_= cfi32' #define cpu_to_cfi32(map, x) _cpu_to_cfi(32, (map)->swap, (x)) ^ include/linux/mtd/cfi_endian.h:36:31: note: expanded from macro '_cpu_to= _cfi' #define _cpu_to_cfi(w, s, x) (cfi_host(s)?(x):_swap_to_cfi(w, s, x)) ^ include/linux/mtd/cfi_endian.h:25:22: note: expanded from macro 'cfi_hos= t' #define cfi_host(s) (cfi_default(s) =3D=3D CFI_HOST_ENDIAN) ^ include/linux/mtd/cfi_endian.h:22:25: note: expanded from macro 'cfi_def= ault' #define cfi_default(s) ((s)?:CFI_DEFAULT_ENDIAN) ^ drivers/mtd/chips/cfi_util.c:100:12: note: Assuming the condition is true onecmd =3D cpu_to_cfi32(map, cmd); ^ include/linux/mtd/cfi_endian.h:30:30: note: expanded from macro 'cpu_to_= cfi32' #define cpu_to_cfi32(map, x) _cpu_to_cfi(32, (map)->swap, (x)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/mtd/cfi_endian.h:36:31: note: expanded from macro '_cpu_to= _cfi' #define _cpu_to_cfi(w, s, x) (cfi_host(s)?(x):_swap_to_cfi(w, s, x)) ^~~~~~~~~~~ include/linux/mtd/cfi_endian.h:25:22: note: expanded from macro 'cfi_hos= t' #define cfi_host(s) (cfi_default(s) =3D=3D CFI_HOST_ENDIAN) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/mtd/cfi_endian.h:22:24: note: expanded from macro 'cfi_def= ault' #define cfi_default(s) ((s)?:CFI_DEFAULT_ENDIAN) ^ drivers/mtd/chips/cfi_util.c:100:12: note: '?' condition is true onecmd =3D cpu_to_cfi32(map, cmd); ^ include/linux/mtd/cfi_endian.h:30:30: note: expanded from macro 'cpu_to_= cfi32' #define cpu_to_cfi32(map, x) _cpu_to_cfi(32, (map)->swap, (x)) ^ include/linux/mtd/cfi_endian.h:36:31: note: expanded from macro '_cpu_to= _cfi' #define _cpu_to_cfi(w, s, x) (cfi_host(s)?(x):_swap_to_cfi(w, s, x)) ^ include/linux/mtd/cfi_endian.h:25:21: note: expanded from macro 'cfi_hos= t' #define cfi_host(s) (cfi_default(s) =3D=3D CFI_HOST_ENDIAN) ^ drivers/mtd/chips/cfi_util.c:101:3: note: Execution continues on line 1= 06 break; ^ drivers/mtd/chips/cfi_util.c:106:2: note: Control jumps to 'case 2:' at= line 116 switch (chips_per_word) { ^ drivers/mtd/chips/cfi_util.c:117:21: note: The result of the left shift = is undefined due to shifting by '32', which is greater or equal to the widt= h of type 'unsigned long' onecmd |=3D (onecmd << (chip_mode * 8)); ^ ~~~~~~~~~~~~~~~ Suppressed 20 warnings (20 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/zl10036.c:488:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &zl10036_tuner_ops, ^~~~~~ drivers/media/dvb-frontends/zl10036.c:488:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &zl10036_tuner_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/cx22702.c:598:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &cx22702_ops, ^~~~~~ drivers/media/dvb-frontends/cx22702.c:598:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &cx22702_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. drivers/hwmon/occ/p8_i2c.c:76:2: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf[1], &data[4], sizeof(u32)); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:76:2: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf[1], &data[4], sizeof(u32)); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:77:2: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf[2], data, sizeof(u32)); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:77:2: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf[2], data, sizeof(u32)); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:93:2: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, &data0, 4); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:93:2: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, &data0, 4); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:94:2: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf + 4, &data1, 4); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:94:2: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(buf + 4, &data1, 4); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:104:2: warning: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&data0, data, min_t(size_t, len, 4)); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:104:2: note: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 memcpy(&data0, data, min_t(size_t, len, 4)); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:107:3: warning: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&data1, data + 4, min_t(size_t, len, 4)); ^~~~~~ drivers/hwmon/occ/p8_i2c.c:107:3: note: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 memcpy(&data1, data + 4, min_t(size_t, len, 4)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. drivers/media/dvb-core/dvb_ca_en50221.c:756:3: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ebuf, buf, bytes_read); ^~~~~~ drivers/media/dvb-core/dvb_ca_en50221.c:756:3: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(ebuf, buf, bytes_read); ^~~~~~ drivers/media/dvb-core/dvb_ca_en50221.c:760:19: warning: The left operan= d of '&' is a garbage value [clang-analyzer-core.UndefinedBinaryOperatorRes= ult] buf[0], (buf[1] & 0x80) =3D=3D 0, bytes_read); ^ drivers/media/dvb-core/dvb_ca_en50221.c:1300:2: note: Assuming 'dvb_ca_e= n50221_debug' is 0 dprintk("%s\n", __func__); ^ drivers/media/dvb-core/dvb_ca_en50221.c:39:6: note: expanded from macro = 'dprintk' if (dvb_ca_en50221_debug) \ ^~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-core/dvb_ca_en50221.c:1300:2: note: Taking false branch dprintk("%s\n", __func__); ^ drivers/media/dvb-core/dvb_ca_en50221.c:39:2: note: expanded from macro = 'dprintk' if (dvb_ca_en50221_debug) \ ^ drivers/media/dvb-core/dvb_ca_en50221.c:1300:2: note: Loop condition is = false. Exiting loop dprintk("%s\n", __func__); ^ drivers/media/dvb-core/dvb_ca_en50221.c:38:30: note: expanded from macro= 'dprintk' #define dprintk(fmt, arg...) do { \ ^ drivers/media/dvb-core/dvb_ca_en50221.c:1306:9: note: Assuming the condi= tion is true while (!kthread_should_stop()) { ^~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-core/dvb_ca_en50221.c:1306:2: note: Loop condition is = true. Entering loop body while (!kthread_should_stop()) { ^ drivers/media/dvb-core/dvb_ca_en50221.c:1308:7: note: Assuming field 'wa= keup' is not equal to 0 if (!ca->wakeup) { ^~~~~~~~~~~ drivers/media/dvb-core/dvb_ca_en50221.c:1308:3: note: Taking false branch if (!ca->wakeup) { ^ drivers/media/dvb-core/dvb_ca_en50221.c:1317:18: note: Assuming 'slot' i= s < field 'slot_count' for (slot =3D 0; slot < ca->slot_count; slot++) -- ^ drivers/media/dvb-frontends/cx22700.c:83:2: note: Loop condition is fals= e. Exiting loop dprintk ("%s\n", __func__); ^ drivers/media/dvb-frontends/cx22700.c:32:2: note: expanded from macro 'd= printk' do { \ ^ drivers/media/dvb-frontends/cx22700.c:87:6: note: Assuming 'ret' is not = equal to 2 if (ret !=3D 2) return -EIO; ^~~~~~~~ drivers/media/dvb-frontends/cx22700.c:87:2: note: Taking true branch if (ret !=3D 2) return -EIO; ^ drivers/media/dvb-frontends/cx22700.c:87:16: note: Returning the value -5 if (ret !=3D 2) return -EIO; ^~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:288:9: note: Returning from 'cx227= 00_readreg' | (cx22700_readreg (state, 0x0e) << 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:288:39: note: The result of the le= ft shift is undefined because the left operand is negative | (cx22700_readreg (state, 0x0e) << 1); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/cx22700.c:298:46: warning: The result of the= left shift is undefined because the left operand is negative [clang-analyz= er-core.UndefinedBinaryOperatorResult] u16 rs_ber =3D (cx22700_readreg (state, 0x0d) << 9) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/cx22700.c:298:16: note: Calling 'cx22700_rea= dreg' u16 rs_ber =3D (cx22700_readreg (state, 0x0d) << 9) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:83:2: note: Assuming 'debug' is 0 dprintk ("%s\n", __func__); ^ drivers/media/dvb-frontends/cx22700.c:33:7: note: expanded from macro 'd= printk' if (debug) printk(KERN_DEBUG "cx22700: " args); \ ^~~~~ drivers/media/dvb-frontends/cx22700.c:83:2: note: Taking false branch dprintk ("%s\n", __func__); ^ drivers/media/dvb-frontends/cx22700.c:33:3: note: expanded from macro 'd= printk' if (debug) printk(KERN_DEBUG "cx22700: " args); \ ^ drivers/media/dvb-frontends/cx22700.c:83:2: note: Loop condition is fals= e. Exiting loop dprintk ("%s\n", __func__); ^ drivers/media/dvb-frontends/cx22700.c:32:2: note: expanded from macro 'd= printk' do { \ ^ drivers/media/dvb-frontends/cx22700.c:87:6: note: Assuming 'ret' is not = equal to 2 if (ret !=3D 2) return -EIO; ^~~~~~~~ drivers/media/dvb-frontends/cx22700.c:87:2: note: Taking true branch if (ret !=3D 2) return -EIO; ^ drivers/media/dvb-frontends/cx22700.c:87:16: note: Returning the value -5 if (ret !=3D 2) return -EIO; ^~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:298:16: note: Returning from 'cx22= 700_readreg' u16 rs_ber =3D (cx22700_readreg (state, 0x0d) << 9) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:298:46: note: The result of the le= ft shift is undefined because the left operand is negative u16 rs_ber =3D (cx22700_readreg (state, 0x0d) << 9) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/cx22700.c:299:39: warning: The result of the= left shift is undefined because the left operand is negative [clang-analyz= er-core.UndefinedBinaryOperatorResult] | (cx22700_readreg (state, 0x0e) << 1); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/cx22700.c:299:9: note: Calling 'cx22700_read= reg' | (cx22700_readreg (state, 0x0e) << 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:83:2: note: Assuming 'debug' is 0 dprintk ("%s\n", __func__); ^ drivers/media/dvb-frontends/cx22700.c:33:7: note: expanded from macro 'd= printk' if (debug) printk(KERN_DEBUG "cx22700: " args); \ ^~~~~ drivers/media/dvb-frontends/cx22700.c:83:2: note: Taking false branch dprintk ("%s\n", __func__); ^ drivers/media/dvb-frontends/cx22700.c:33:3: note: expanded from macro 'd= printk' if (debug) printk(KERN_DEBUG "cx22700: " args); \ ^ drivers/media/dvb-frontends/cx22700.c:83:2: note: Loop condition is fals= e. Exiting loop dprintk ("%s\n", __func__); ^ drivers/media/dvb-frontends/cx22700.c:32:2: note: expanded from macro 'd= printk' do { \ ^ drivers/media/dvb-frontends/cx22700.c:87:6: note: Assuming 'ret' is not = equal to 2 if (ret !=3D 2) return -EIO; ^~~~~~~~ drivers/media/dvb-frontends/cx22700.c:87:2: note: Taking true branch if (ret !=3D 2) return -EIO; ^ drivers/media/dvb-frontends/cx22700.c:87:16: note: Returning the value -5 if (ret !=3D 2) return -EIO; ^~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:299:9: note: Returning from 'cx227= 00_readreg' | (cx22700_readreg (state, 0x0e) << 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/cx22700.c:299:39: note: The result of the le= ft shift is undefined because the left operand is negative | (cx22700_readreg (state, 0x0e) << 1); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ >> drivers/media/dvb-frontends/cx22700.c:390:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &cx22700_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/cx22700.c:390:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &cx22700_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/nvme/target/io-cmd-file.c:166:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&req->f.iocb, 0, sizeof(struct kiocb)); ^~~~~~ drivers/nvme/target/io-cmd-file.c:166:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(&req->f.iocb, 0, sizeof(struct kiocb)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/nvme/target/passthru.c:106:2: warning: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(id->subnqn, ctrl->subsysnqn, sizeof(id->subnqn)); ^~~~~~ drivers/nvme/target/passthru.c:106:2: note: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 memcpy(id->subnqn, ctrl->subsysnqn, sizeof(id->subnqn)); ^~~~~~ drivers/nvme/target/passthru.c:144:4: warning: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&id->lbaf[i], 0, sizeof(id->lbaf[i])); ^~~~~~ drivers/nvme/target/passthru.c:144:4: note: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 memset(&id->lbaf[i], 0, sizeof(id->lbaf[i])); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. include/linux/blkdev.h:522:16: warning: The result of the right shift is= undefined because the right operand is negative [clang-analyzer-core.Undef= inedBinaryOperatorResult] return sector >> ilog2(q->limits.chunk_sectors); ^ drivers/nvme/target/zns.c:467:26: note: Calling 'bdev_zone_sectors' sector_t zone_sectors =3D bdev_zone_sectors(bdev); ^~~~~~~~~~~~~~~~~~~~~~~ include/linux/blkdev.h:1118:6: note: Assuming 'q' is non-null if (q) ^ include/linux/blkdev.h:1118:2: note: Taking true branch if (q) ^ include/linux/blkdev.h:1119:10: note: Calling 'blk_queue_zone_sectors' return blk_queue_zone_sectors(q); ^~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/blkdev.h:508:9: note: Calling 'blk_queue_is_zoned' return blk_queue_is_zoned(q) ? q->limits.chunk_sectors : 0; ^~~~~~~~~~~~~~~~~~~~~ include/linux/blkdev.h:497:10: note: Calling 'blk_queue_zoned_model' switch (blk_queue_zoned_model(q)) { ^~~~~~~~~~~~~~~~~~~~~~~~ include/linux/blkdev.h:490:2: note: Taking true branch if (IS_ENABLED(CONFIG_BLK_DEV_ZONED)) ^ include/linux/blkdev.h:491:3: note: Returning without writing to 'q->lim= its.zoned', which participates in a condition later return q->limits.zoned; ^ include/linux/blkdev.h:497:10: note: Returning from 'blk_queue_zoned_mod= el' switch (blk_queue_zoned_model(q)) { ^~~~~~~~~~~~~~~~~~~~~~~~ include/linux/blkdev.h:497:2: note: Control jumps to 'case BLK_ZONED_HM:= ' at line 499 switch (blk_queue_zoned_model(q)) { ^ include/linux/blkdev.h:500:3: note: Returning without writing to 'q->lim= its.zoned', which participates in a condition later return true; ^ include/linux/blkdev.h:508:9: note: Returning from 'blk_queue_is_zoned' return blk_queue_is_zoned(q) ? q->limits.chunk_sectors : 0; ^~~~~~~~~~~~~~~~~~~~~ include/linux/blkdev.h:508:9: note: '?' condition is true include/linux/blkdev.h:508:2: note: Returning without writing to 'q->lim= its.zoned', which participates in a condition later return blk_queue_is_zoned(q) ? q->limits.chunk_sectors : 0; ^ include/linux/blkdev.h:1119:10: note: Returning from 'blk_queue_zone_sec= tors' return blk_queue_zone_sectors(q); ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/nvme/target/zns.c:467:26: note: Returning from 'bdev_zone_sector= s' sector_t zone_sectors =3D bdev_zone_sectors(bdev); ^~~~~~~~~~~~~~~~~~~~~~~ drivers/nvme/target/zns.c:471:6: note: 'op' is not equal to REQ_OP_LAST if (op =3D=3D REQ_OP_LAST) { ^~ drivers/nvme/target/zns.c:471:2: note: Taking false branch if (op =3D=3D REQ_OP_LAST) { ^ drivers/nvme/target/zns.c:478:6: note: Assuming field 'select_all' is no= t equal to 0 if (req->cmd->zms.select_all) { ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/nvme/target/zns.c:478:2: note: Taking true branch if (req->cmd->zms.select_all) { ^ drivers/nvme/target/zns.c:479:12: note: Calling 'nvmet_bdev_execute_zmgm= t_send_all' status =3D nvmet_bdev_execute_zmgmt_send_all(req); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/nvme/target/zns.c:440:2: note: Control jumps to 'case REQ_OP_ZON= E_FINISH:' at line 450 -- ^~~~~~~~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1850:2: note: Taking false branch if (pdev->dev.of_node) ^ drivers/dma/ti/omap-dma.c:1858:6: note: Assuming field 'legacy' is true if (!od->legacy) { ^~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1858:2: note: Taking false branch if (!od->legacy) { ^ drivers/dma/ti/omap-dma.c:1863:6: note: Assuming field 'll123_supported'= is false if (od->ll123_supported) ^~~~~~~~~~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1863:2: note: Taking false branch if (od->ll123_supported) ^ drivers/dma/ti/omap-dma.c:1866:2: note: Calling 'omap_dma_free' omap_dma_free(od); ^~~~~~~~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1515:2: note: Loop condition is true. Enterin= g loop body while (!list_empty(&od->ddev.channels)) { ^ drivers/dma/ti/omap-dma.c:1521:3: note: Memory is released kfree(c); ^~~~~~~~ drivers/dma/ti/omap-dma.c:1515:2: note: Loop condition is true. Enterin= g loop body while (!list_empty(&od->ddev.channels)) { ^ drivers/dma/ti/omap-dma.c:1519:3: note: Calling 'list_del' list_del(&c->vc.chan.device_node); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:148:2: note: Calling '__list_del_entry' __list_del_entry(entry); ^~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:134:6: note: Assuming the condition is false if (!__list_del_entry_valid(entry)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:134:2: note: Taking false branch if (!__list_del_entry_valid(entry)) ^ include/linux/list.h:137:13: note: Use of memory after it is freed __list_del(entry->prev, entry->next); ^~~~~~~~~~~ include/linux/list.h:149:14: warning: Use of memory after it is freed [c= lang-analyzer-unix.Malloc] entry->next =3D LIST_POISON1; ^ drivers/dma/ti/omap-dma.c:1847:6: note: Assuming field 'may_lose_context= ' is 0 if (od->cfg->may_lose_context) ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1847:2: note: Taking false branch if (od->cfg->may_lose_context) ^ drivers/dma/ti/omap-dma.c:1850:6: note: Assuming field 'of_node' is null if (pdev->dev.of_node) ^~~~~~~~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1850:2: note: Taking false branch if (pdev->dev.of_node) ^ drivers/dma/ti/omap-dma.c:1858:6: note: Assuming field 'legacy' is true if (!od->legacy) { ^~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1858:2: note: Taking false branch if (!od->legacy) { ^ drivers/dma/ti/omap-dma.c:1863:6: note: Assuming field 'll123_supported'= is false if (od->ll123_supported) ^~~~~~~~~~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1863:2: note: Taking false branch if (od->ll123_supported) ^ drivers/dma/ti/omap-dma.c:1866:2: note: Calling 'omap_dma_free' omap_dma_free(od); ^~~~~~~~~~~~~~~~~ drivers/dma/ti/omap-dma.c:1515:2: note: Loop condition is true. Enterin= g loop body while (!list_empty(&od->ddev.channels)) { ^ drivers/dma/ti/omap-dma.c:1521:3: note: Memory is released kfree(c); ^~~~~~~~ drivers/dma/ti/omap-dma.c:1515:2: note: Loop condition is true. Enterin= g loop body while (!list_empty(&od->ddev.channels)) { ^ drivers/dma/ti/omap-dma.c:1519:3: note: Calling 'list_del' list_del(&c->vc.chan.device_node); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:149:14: note: Use of memory after it is freed entry->next =3D LIST_POISON1; ~~~~~~~~~~~ ^ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 18 warnings generated. drivers/mtd/nand/raw/ams-delta.c:199:17: warning: Value stored to 'dev' = during its initialization is never read [clang-analyzer-deadcode.DeadStores] struct device *dev =3D &nand_to_mtd(this)->dev; ^~~ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/ams-delta.c:199:17: note: Value stored to 'dev' dur= ing its initialization is never read struct device *dev =3D &nand_to_mtd(this)->dev; ^~~ ~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. >> drivers/mtd/nand/raw/denali.c:618:3: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(buf, 0xff, size); ^~~~~~ drivers/mtd/nand/raw/denali.c:618:3: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(buf, 0xff, size); ^~~~~~ drivers/mtd/nand/raw/denali.c:705:3: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(buf, 0xff, size); ^~~~~~ drivers/mtd/nand/raw/denali.c:705:3: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(buf, 0xff, size); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 18 warnings generated. drivers/mtd/nand/raw/s3c2410.c:1130:2: warning: Value stored to 'size' i= s never read [clang-analyzer-deadcode.DeadStores] size =3D resource_size(res); ^ ~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/s3c2410.c:1130:2: note: Value stored to 'size' is n= ever read size =3D resource_size(res); ^ ~~~~~~~~~~~~~~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 22 warnings generated. drivers/mtd/nand/raw/diskonchip.c:142:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(syn, 0, sizeof(syn)); ^~~~~~ drivers/mtd/nand/raw/diskonchip.c:142:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(syn, 0, sizeof(syn)); ^~~~~~ drivers/mtd/nand/raw/diskonchip.c:371:20: warning: The left operand of '= <<' is a garbage value [clang-analyzer-core.UndefinedBinaryOperatorResult] ret =3D ((u16)id[0] << 8) | id[1]; ^ drivers/mtd/nand/raw/diskonchip.c:1548:6: note: Assuming 'doc_config_loc= ation' is not equal to 0 if (doc_config_location) { ^~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/diskonchip.c:1548:2: note: Taking true branch if (doc_config_location) { ^ drivers/mtd/nand/raw/diskonchip.c:1549:3: note: Loop condition is false.= Exiting loop pr_info("Using configured DiskOnChip probe address 0x%lx= \n", ^ include/linux/printk.h:519:2: note: expanded from macro 'pr_info' printk(KERN_INFO pr_fmt(fmt), ##__VA_ARGS__) ^ include/linux/printk.h:446:26: note: expanded from macro 'printk' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) ^ include/linux/printk.h:417:3: note: expanded from macro 'printk_index_wr= ap' __printk_index_emit(_fmt, NULL, NULL); \ ^ include/linux/printk.h:392:34: note: expanded from macro '__printk_index= _emit' #define __printk_index_emit(...) do {} while (0) ^ drivers/mtd/nand/raw/diskonchip.c:1551:9: note: Calling 'doc_probe' ret =3D doc_probe(doc_config_location); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/diskonchip.c:1311:6: note: Assuming the condition i= s false if (!request_mem_region(physadr, DOC_IOREMAP_LEN, "DiskOnChip")) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/diskonchip.c:1311:2: note: Taking false branch if (!request_mem_region(physadr, DOC_IOREMAP_LEN, "DiskOnChip")) ^ drivers/mtd/nand/raw/diskonchip.c:1314:6: note: Assuming 'virtadr' is no= n-null if (!virtadr) { ^~~~~~~~ drivers/mtd/nand/raw/diskonchip.c:1314:2: note: Taking false branch if (!virtadr) { ^ drivers/mtd/nand/raw/diskonchip.c:1341:2: note: Control jumps to 'case 3= 2:' @line 1342 switch (ChipID) { ^ drivers/mtd/nand/raw/diskonchip.c:1344:3: note: Execution continues on = line 1388 break; ^ drivers/mtd/nand/raw/diskonchip.c:1391:7: note: Assuming 'tmp' is not eq= ual to 'tmpb' if ((tmp =3D=3D tmpb) || (tmp !=3D tmpc)) { ^~~~~~~~~~~ drivers/mtd/nand/raw/diskonchip.c:1391:6: note: Left side of '||' is fal= se if ((tmp =3D=3D tmpb) || (tmp !=3D tmpc)) { ^ drivers/mtd/nand/raw/diskonchip.c:1391:24: note: Assuming 'tmp' is equal= to 'tmpc' if ((tmp =3D=3D tmpb) || (tmp !=3D tmpc)) { ^~~~~~~~~~~ drivers/mtd/nand/raw/diskonchip.c:1391:2: note: Taking false branch if ((tmp =3D=3D tmpb) || (tmp !=3D tmpc)) { ^ drivers/mtd/nand/raw/diskonchip.c:1397:2: note: Loop condition is false.= Execution continues on line 1432 for (mtd =3D doclist; mtd; mtd =3D doc->nextdoc) { ^ drivers/mtd/nand/raw/diskonchip.c:1432:2: note: Loop condition is false.= Exiting loop pr_notice("DiskOnChip found at 0x%lx\n", physadr); ^ include/linux/printk.h:509:2: note: expanded from macro 'pr_notice' printk(KERN_NOTICE pr_fmt(fmt), ##__VA_ARGS__) ^ include/linux/printk.h:446:26: note: expanded from macro 'printk' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) -- ^ drivers/base/regmap/regmap.c:1526:11: note: Taking false branch async =3D list_first_entry_or_null(&map->async_free, ^ include/linux/list.h:554:28: note: expanded from macro 'list_first_entry= _or_null' struct list_head *pos__ =3D READ_ONCE(head__->next); \ ^ include/asm-generic/rwonce.h:49:2: note: expanded from macro 'READ_ONCE' compiletime_assert_rwonce_type(x); \ ^ include/asm-generic/rwonce.h:36:2: note: expanded from macro 'compiletim= e_assert_rwonce_type' compiletime_assert(__native_word(t) || sizeof(t) =3D=3D sizeof(l= ong long), \ ^ include/linux/compiler_types.h:346:2: note: expanded from macro 'compile= time_assert' _compiletime_assert(condition, msg, __compiletime_assert_, __COU= NTER__) ^ include/linux/compiler_types.h:334:2: note: expanded from macro '_compil= etime_assert' __compiletime_assert(condition, msg, prefix, suffix) ^ include/linux/compiler_types.h:326:3: note: expanded from macro '__compi= letime_assert' if (!(condition)) \ ^ drivers/base/regmap/regmap.c:1526:11: note: Loop condition is false. Ex= iting loop async =3D list_first_entry_or_null(&map->async_free, ^ include/linux/list.h:554:28: note: expanded from macro 'list_first_entry= _or_null' struct list_head *pos__ =3D READ_ONCE(head__->next); \ ^ include/asm-generic/rwonce.h:49:2: note: expanded from macro 'READ_ONCE' compiletime_assert_rwonce_type(x); \ ^ include/asm-generic/rwonce.h:36:2: note: expanded from macro 'compiletim= e_assert_rwonce_type' compiletime_assert(__native_word(t) || sizeof(t) =3D=3D sizeof(l= ong long), \ ^ include/linux/compiler_types.h:346:2: note: expanded from macro 'compile= time_assert' _compiletime_assert(condition, msg, __compiletime_assert_, __COU= NTER__) ^ include/linux/compiler_types.h:334:2: note: expanded from macro '_compil= etime_assert' __compiletime_assert(condition, msg, prefix, suffix) ^ include/linux/compiler_types.h:318:2: note: expanded from macro '__compi= letime_assert' do { \ ^ drivers/base/regmap/regmap.c:1526:11: note: Assuming 'pos__' is not equa= l to 'head__' async =3D list_first_entry_or_null(&map->async_free, ^ include/linux/list.h:555:2: note: expanded from macro 'list_first_entry_= or_null' pos__ !=3D head__ ? list_entry(pos__, type, member) : NULL; \ ^~~~~~~~~~~~~~~ drivers/base/regmap/regmap.c:1526:11: note: '?' condition is true async =3D list_first_entry_or_null(&map->async_free, ^ include/linux/list.h:555:2: note: expanded from macro 'list_first_entry_= or_null' pos__ !=3D head__ ? list_entry(pos__, type, member) : NULL; \ ^ drivers/base/regmap/regmap.c:1529:3: note: Calling 'list_del' list_del(&async->list); ^~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:149:14: note: Use of memory after it is freed entry->next =3D LIST_POISON1; ~~~~~~~~~~~ ^ Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/i2c/saa6588.c:157:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, &s->buffer[s->rd_index], 3); ^~~~~~ drivers/media/i2c/saa6588.c:157:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, &s->buffer[s->rd_index], 3); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 59 warnings generated. drivers/media/i2c/tda1997x.c:1037:2: warning: Value stored to 'reg' is n= ever read [clang-analyzer-deadcode.DeadStores] reg =3D io_write(sd, REG_RATE_CTRL, reg); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/tda1997x.c:1037:2: note: Value stored to 'reg' is neve= r read reg =3D io_write(sd, REG_RATE_CTRL, reg); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/tda1997x.c:1520:3: warning: Value stored to 'source' i= s never read [clang-analyzer-deadcode.DeadStores] source &=3D ~MASK_AVI_IF; ^ ~~~~~~~~~~~~ drivers/media/i2c/tda1997x.c:1520:3: note: Value stored to 'source' is n= ever read source &=3D ~MASK_AVI_IF; ^ ~~~~~~~~~~~~ >> drivers/media/i2c/tda1997x.c:1717:2: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(timings, 0, sizeof(struct v4l2_dv_timings)); ^~~~~~ drivers/media/i2c/tda1997x.c:1717:2: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(timings, 0, sizeof(struct v4l2_dv_timings)); ^~~~~~ drivers/media/i2c/tda1997x.c:1772:2: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(format, 0, sizeof(*format)); ^~~~~~ drivers/media/i2c/tda1997x.c:1772:2: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(format, 0, sizeof(*format)); ^~~~~~ drivers/media/i2c/tda1997x.c:1849:2: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(edid->reserved, 0, sizeof(edid->reserved)); ^~~~~~ drivers/media/i2c/tda1997x.c:1849:2: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(edid->reserved, 0, sizeof(edid->reserved)); ^~~~~~ >> drivers/media/i2c/tda1997x.c:1865:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(edid->edid, state->edid.edid + edid->start_block * 128, ^~~~~~ drivers/media/i2c/tda1997x.c:1865:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(edid->edid, state->edid.edid + edid->start_block * 128, ^~~~~~ drivers/media/i2c/tda1997x.c:1877:2: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(edid->reserved, 0, sizeof(edid->reserved)); ^~~~~~ drivers/media/i2c/tda1997x.c:1877:2: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(edid->reserved, 0, sizeof(edid->reserved)); ^~~~~~ drivers/media/i2c/tda1997x.c:1905:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(state->edid.edid, edid->edid, 256); ^~~~~~ drivers/media/i2c/tda1997x.c:1905:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(state->edid.edid, edid->edid, 256); ^~~~~~ drivers/media/i2c/tda1997x.c:2123:2: warning: Value stored to 'reg' is n= ever read [clang-analyzer-deadcode.DeadStores] reg =3D io_read(sd, REG_VERSION); ^ ~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/tda1997x.c:2123:2: note: Value stored to 'reg' is neve= r read reg =3D io_read(sd, REG_VERSION); ^ ~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/tda1997x.c:2125:2: warning: Value stored to 'reg' is n= ever read [clang-analyzer-deadcode.DeadStores] reg =3D io_read(sd, REG_CMTP_REG10); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/tda1997x.c:2125:2: note: Value stored to 'reg' is neve= r read reg =3D io_read(sd, REG_CMTP_REG10); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> drivers/media/i2c/tda1997x.c:2592:2: warning: Call to function 'snprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'snprintf_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(sd->name, sizeof(sd->name), "%s %d-%04x", ^~~~~~~~ drivers/media/i2c/tda1997x.c:2592:2: note: Call to function 'snprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'snprintf_s' in case of C11 snprintf(sd->name, sizeof(sd->name), "%s %d-%04x", ^~~~~~~~ Suppressed 48 warnings (47 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 40 warnings generated. fs/dcache.c:320:3: warning: Call to function 'memcpy' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureAP= I.DeprecatedOrUnsafeBufferHandling] memcpy(name->inline_name, dentry->d_iname, ^~~~~~ fs/dcache.c:320:3: note: Call to function 'memcpy' is insecure as it doe= s not provide security checks introduced in the C11 standard. Replace with = analogous functions that support length arguments or provides boundary chec= ks such as 'memcpy_s' in case of C11 memcpy(name->inline_name, dentry->d_iname, ^~~~~~ fs/dcache.c:1800:2: warning: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureA= PI.DeprecatedOrUnsafeBufferHandling] memcpy(dname, name->name, name->len); ^~~~~~ fs/dcache.c:1800:2: note: Call to function 'memcpy' is insecure as it do= es not provide security checks introduced in the C11 standard. Replace with= analogous functions that support length arguments or provides boundary che= cks such as 'memcpy_s' in case of C11 memcpy(dname, name->name, name->len); ^~~~~~ fs/dcache.c:2824:4: warning: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureA= PI.DeprecatedOrUnsafeBufferHandling] memcpy(target->d_iname, dentry->d_name.name, ^~~~~~ fs/dcache.c:2824:4: note: Call to function 'memcpy' is insecure as it do= es not provide security checks introduced in the C11 standard. Replace with= analogous functions that support length arguments or provides boundary che= cks such as 'memcpy_s' in case of C11 memcpy(target->d_iname, dentry->d_name.name, ^~~~~~ fs/dcache.c:2835:4: warning: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureA= PI.DeprecatedOrUnsafeBufferHandling] memcpy(dentry->d_iname, target->d_name.name, ^~~~~~ fs/dcache.c:2835:4: note: Call to function 'memcpy' is insecure as it do= es not provide security checks introduced in the C11 standard. Replace with= analogous functions that support length arguments or provides boundary che= cks such as 'memcpy_s' in case of C11 memcpy(dentry->d_iname, target->d_name.name, ^~~~~~ fs/dcache.c:2863:3: warning: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecureA= PI.DeprecatedOrUnsafeBufferHandling] memcpy(dentry->d_iname, target->d_name.name, ^~~~~~ fs/dcache.c:2863:3: note: Call to function 'memcpy' is insecure as it do= es not provide security checks introduced in the C11 standard. Replace with= analogous functions that support length arguments or provides boundary che= cks such as 'memcpy_s' in case of C11 memcpy(dentry->d_iname, target->d_name.name, ^~~~~~ fs/dcache.c:3203:23: warning: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] dentry->d_name.len =3D sprintf(dentry->d_iname, "#%llu", ^~~~~~~ fs/dcache.c:3203:23: note: Call to function 'sprintf' is insecure as it = does not provide security checks introduced in the C11 standard. Replace wi= th analogous functions that support length arguments or provides boundary c= hecks such as 'sprintf_s' in case of C11 dentry->d_name.len =3D sprintf(dentry->d_iname, "#%llu", ^~~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 67 warnings generated. drivers/pcmcia/pcmcia_cis.c:358:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(*get->buf, tuple->TupleData, tuple->TupleDataLen); ^~~~~~ drivers/pcmcia/pcmcia_cis.c:358:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(*get->buf, tuple->TupleData, tuple->TupleDataLen); ^~~~~~ Suppressed 66 warnings (66 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 27 warnings generated. drivers/input/serio/serio.c:347:9: warning: Call to function 'sprintf' i= s insecure as it does not provide bounding of the memory buffer or security= checks introduced in the C11 standard. Replace with analogous functions th= at support length arguments or provides boundary checks such as 'sprintf_s'= in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBuff= erHandling] return sprintf(buf, "%s\n", serio->name); ^~~~~~~ drivers/input/serio/serio.c:347:9: note: Call to function 'sprintf' is i= nsecure as it does not provide bounding of the memory buffer or security ch= ecks introduced in the C11 standard. Replace with analogous functions that = support length arguments or provides boundary checks such as 'sprintf_s' in= case of C11 return sprintf(buf, "%s\n", serio->name); ^~~~~~~ drivers/input/serio/serio.c:354:9: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "serio:ty%02Xpr%02Xid%02Xex%02X\n", ^~~~~~~ drivers/input/serio/serio.c:354:9: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "serio:ty%02Xpr%02Xid%02Xex%02X\n", ^~~~~~~ drivers/input/serio/serio.c:361:9: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%02x\n", serio->id.type); ^~~~~~~ drivers/input/serio/serio.c:361:9: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%02x\n", serio->id.type); ^~~~~~~ drivers/input/serio/serio.c:367:9: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%02x\n", serio->id.proto); ^~~~~~~ drivers/input/serio/serio.c:367:9: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%02x\n", serio->id.proto); ^~~~~~~ drivers/input/serio/serio.c:373:9: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%02x\n", serio->id.id); ^~~~~~~ drivers/input/serio/serio.c:373:9: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%02x\n", serio->id.id); ^~~~~~~ drivers/input/serio/serio.c:379:9: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%02x\n", serio->id.extra); ^~~~~~~ drivers/input/serio/serio.c:379:9: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%02x\n", serio->id.extra); ^~~~~~~ drivers/input/serio/serio.c:416:9: warning: Call to function 'sprintf' i= s insecure as it does not provide bounding of the memory buffer or security= checks introduced in the C11 standard. Replace with analogous functions th= at support length arguments or provides boundary checks such as 'sprintf_s'= in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBuff= erHandling] return sprintf(buf, "%s\n", serio->manual_bind ? "manual" : "aut= o"); ^~~~~~~ drivers/input/serio/serio.c:416:9: note: Call to function 'sprintf' is i= nsecure as it does not provide bounding of the memory buffer or security ch= ecks introduced in the C11 standard. Replace with analogous functions that = support length arguments or provides boundary checks such as 'sprintf_s' in= case of C11 return sprintf(buf, "%s\n", serio->manual_bind ? "manual" : "aut= o"); -- include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) ^ include/linux/minmax.h:28:26: note: expanded from macro '__cmp' #define __cmp(x, y, op) ((x) op (y) ? (x) : (y)) ^ drivers/hwmon/max6621.c:323:10: note: Calling 'max6621_temp_mc2reg' val =3D max6621_temp_mc2reg(val); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwmon/max6621.c:135:23: note: The result of the left shift is un= defined because the left operand is negative return (val / 1000L) << MAX6621_REG_TEMP_SHIFT; ~~~~~~~~~~~~~ ^ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 53 warnings generated. drivers/media/i2c/ad9389b.c:399:7: warning: Value stored to 'N' during i= ts initialization is never read [clang-analyzer-deadcode.DeadStores] u32 N =3D (ad9389b_rd(sd, 0x01) & 0xf) << 16 | ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ad9389b.c:399:7: note: Value stored to 'N' during its = initialization is never read u32 N =3D (ad9389b_rd(sd, 0x01) & 0xf) << 16 | ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/i2c/ad9389b.c:680:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(edid->edid, &state->edid.data[edid->start_block * 128], ^~~~~~ drivers/media/i2c/ad9389b.c:680:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(edid->edid, &state->edid.data[edid->start_block * 128], ^~~~~~ drivers/media/i2c/ad9389b.c:801:4: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(bp, "0x%02x, ", buf[j]); ^~~~~~~ drivers/media/i2c/ad9389b.c:801:4: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 sprintf(bp, "0x%02x, ", buf[j]); ^~~~~~~ drivers/media/i2c/ad9389b.c:928:3: warning: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&state->edid, 0, sizeof(struct ad9389b_state_edid= )); ^~~~~~ drivers/media/i2c/ad9389b.c:928:3: note: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 memset(&state->edid, 0, sizeof(struct ad9389b_state_edid= )); ^~~~~~ drivers/media/i2c/ad9389b.c:960:3: warning: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&state->edid, 0, sizeof(struct ad9389b_state_edid= )); ^~~~~~ drivers/media/i2c/ad9389b.c:960:3: note: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 memset(&state->edid, 0, sizeof(struct ad9389b_state_edid= )); ^~~~~~ drivers/media/i2c/ad9389b.c:1078:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(edid, 0, sizeof(struct ad9389b_state_edid)); ^~~~~~ drivers/media/i2c/ad9389b.c:1078:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(edid, 0, sizeof(struct ad9389b_state_edid)); ^~~~~~ drivers/media/i2c/ad9389b.c:1108:2: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->pdata, pdata, sizeof(state->pdata)); ^~~~~~ drivers/media/i2c/ad9389b.c:1108:2: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->pdata, pdata, sizeof(state->pdata)); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/dvb-frontends/drxd_hard.c:858:9: warning: The left express= ion of the compound assignment is an uninitialized value. The computed valu= e will also be garbage [clang-analyzer-core.uninitialized.Assign] Value &=3D FE_AG_REG_GC1_AGC_DAT__M; ^ drivers/media/dvb-frontends/drxd_hard.c:2761:8: note: Calling 'ReadIFAgc' res =3D ReadIFAgc(state, &value); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/drxd_hard.c:855:6: note: Assuming field 'ctr= lMode' is not equal to AGC_CTRL_OFF if (state->if_agc_cfg.ctrlMode !=3D AGC_CTRL_OFF) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/drxd_hard.c:855:2: note: Taking true branch if (state->if_agc_cfg.ctrlMode !=3D AGC_CTRL_OFF) { ^ drivers/media/dvb-frontends/drxd_hard.c:856:3: note: 'Value' declared wi= thout an initial value u16 Value; ^~~~~~~~~ drivers/media/dvb-frontends/drxd_hard.c:857:12: note: Calling 'Read16' status =3D Read16(state, FE_AG_REG_GC1_AGC_DAT__A, &Valu= e, 0); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~ drivers/media/dvb-frontends/drxd_hard.c:232:2: note: Taking true branch if (i2c_read(state->i2c, adr, mm1, 4, mm2, 2) < 0) ^ drivers/media/dvb-frontends/drxd_hard.c:233:3: note: Returning without w= riting to '*data' return -1; ^ drivers/media/dvb-frontends/drxd_hard.c:857:12: note: Returning from 'Re= ad16' status =3D Read16(state, FE_AG_REG_GC1_AGC_DAT__A, &Valu= e, 0); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~ drivers/media/dvb-frontends/drxd_hard.c:858:9: note: The left expression= of the compound assignment is an uninitialized value. The computed value w= ill also be garbage Value &=3D FE_AG_REG_GC1_AGC_DAT__M; ~~~~~ ^ drivers/media/dvb-frontends/drxd_hard.c:2259:4: warning: Value stored to= 'operationMode' is never read [clang-analyzer-deadcode.DeadStores] operationMode |=3D SC_RA_RAM_OP_AUTO_RATE__M; ^ drivers/media/dvb-frontends/drxd_hard.c:2259:4: note: Value stored to 'o= perationMode' is never read Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/tda10023.c:527:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &tda10023_ops, sizeof(struct dvb_fr= ontend_ops)); ^~~~~~ drivers/media/dvb-frontends/tda10023.c:527:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &tda10023_ops, sizeof(struct dvb_fr= ontend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/media/dvb-frontends/stv0297.c:128:39: warning: The result of the= left shift is undefined because the left operand is negative [clang-analyz= er-core.UndefinedBinaryOperatorResult] | (stv0297_readreg(state, 0x56) << 8) ^ drivers/media/dvb-frontends/stv0297.c:616:18: note: Assuming the conditi= on is false p->inversion =3D (reg_83 & 0x08) ? INVERSION_ON : INVERSION_OFF; ^~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:616:17: note: '?' condition is fal= se p->inversion =3D (reg_83 & 0x08) ? INVERSION_ON : INVERSION_OFF; ^ drivers/media/dvb-frontends/stv0297.c:617:6: note: Assuming field 'inver= t' is 0 if (state->config->invert) ^~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:617:2: note: Taking false branch if (state->config->invert) ^ drivers/media/dvb-frontends/stv0297.c:619:19: note: Calling 'stv0297_get= _symbolrate' p->symbol_rate =3D stv0297_get_symbolrate(state) * 1000; ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:128:10: note: Calling 'stv0297_rea= dreg' | (stv0297_readreg(state, 0x56) << 8) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:64:21: note: Field 'stop_during_re= ad' is 0 if (state->config->stop_during_read) { ^ drivers/media/dvb-frontends/stv0297.c:64:2: note: Taking false branch if (state->config->stop_during_read) { ^ drivers/media/dvb-frontends/stv0297.c:74:7: note: Assuming the condition= is true if ((ret =3D i2c_transfer(state->i2c, msg, 2)) !=3D 2) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:74:3: note: Taking true branch if ((ret =3D i2c_transfer(state->i2c, msg, 2)) !=3D 2) { ^ drivers/media/dvb-frontends/stv0297.c:75:4: note: Loop condition is fals= e. Exiting loop dprintk("%s: readreg error (reg =3D=3D 0x%02x, r= et =3D=3D %i)\n", __func__, reg, ret); ^ drivers/media/dvb-frontends/stv0297.c:31:23: note: expanded from macro '= dprintk' #define dprintk(x...) printk(x) ^ include/linux/printk.h:446:26: note: expanded from macro 'printk' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) ^ include/linux/printk.h:417:3: note: expanded from macro 'printk_index_wr= ap' __printk_index_emit(_fmt, NULL, NULL); \ ^ include/linux/printk.h:392:34: note: expanded from macro '__printk_index= _emit' #define __printk_index_emit(...) do {} while (0) ^ drivers/media/dvb-frontends/stv0297.c:76:4: note: Returning the value -1 return -1; ^~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:128:10: note: Returning from 'stv0= 297_readreg' | (stv0297_readreg(state, 0x56) << 8) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:128:39: note: The result of the le= ft shift is undefined because the left operand is negative | (stv0297_readreg(state, 0x56) << 8) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/stv0297.c:129:39: warning: The result of the= left shift is undefined because the left operand is negative [clang-analyz= er-core.UndefinedBinaryOperatorResult] | (stv0297_readreg(state, 0x57) << 16) ^ drivers/media/dvb-frontends/stv0297.c:616:18: note: Assuming the conditi= on is false p->inversion =3D (reg_83 & 0x08) ? INVERSION_ON : INVERSION_OFF; ^~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:616:17: note: '?' condition is fal= se p->inversion =3D (reg_83 & 0x08) ? INVERSION_ON : INVERSION_OFF; ^ drivers/media/dvb-frontends/stv0297.c:617:6: note: Assuming field 'inver= t' is 0 if (state->config->invert) ^~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:617:2: note: Taking false branch if (state->config->invert) ^ drivers/media/dvb-frontends/stv0297.c:619:19: note: Calling 'stv0297_get= _symbolrate' p->symbol_rate =3D stv0297_get_symbolrate(state) * 1000; ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:129:10: note: Calling 'stv0297_rea= dreg' | (stv0297_readreg(state, 0x57) << 16) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:64:21: note: Field 'stop_during_re= ad' is 0 if (state->config->stop_during_read) { ^ drivers/media/dvb-frontends/stv0297.c:64:2: note: Taking false branch if (state->config->stop_during_read) { ^ drivers/media/dvb-frontends/stv0297.c:74:7: note: Assuming the condition= is true if ((ret =3D i2c_transfer(state->i2c, msg, 2)) !=3D 2) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv0297.c:74:3: note: Taking true branch if ((ret =3D i2c_transfer(state->i2c, msg, 2)) !=3D 2) { ^ drivers/media/dvb-frontends/stv0297.c:75:4: note: Loop condition is fals= e. Exiting loop dprintk("%s: readreg error (reg =3D=3D 0x%02x, r= et =3D=3D %i)\n", __func__, reg, ret); -- ^ drivers/hwmon/pmbus/zl6100.c:118:6: note: 'negative' is false if (negative) ^~~~~~~~ drivers/hwmon/pmbus/zl6100.c:118:2: note: Taking false branch if (negative) ^ drivers/hwmon/pmbus/zl6100.c:122:41: note: The result of the left shift = is undefined because the left operand is negative return (mantissa & 0x7ff) | ((exponent << 11) & 0xf800); ~~~~~~~~ ^ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 22 warnings generated. fs/pstore/ram.c:149:6: warning: Call to function 'sscanf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(buffer, RAMOOPS_KERNMSG_HDR "%lld.%lu-%c\n%n", ^~~~~~ fs/pstore/ram.c:149:6: note: Call to function 'sscanf' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'sscanf_s' in case of C11 if (sscanf(buffer, RAMOOPS_KERNMSG_HDR "%lld.%lu-%c\n%n", ^~~~~~ fs/pstore/ram.c:157:13: warning: Call to function 'sscanf' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.insec= ureAPI.DeprecatedOrUnsafeBufferHandling] } else if (sscanf(buffer, RAMOOPS_KERNMSG_HDR "%lld.%lu\n%n", ^~~~~~ fs/pstore/ram.c:157:13: note: Call to function 'sscanf' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'sscanf_s' in case of C11 } else if (sscanf(buffer, RAMOOPS_KERNMSG_HDR "%lld.%lu\n%n", ^~~~~~ fs/pstore/ram.c:276:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(record->buf, (char *)persistent_ram_old(prz) + header_len= gth, ^~~~~~ fs/pstore/ram.c:276:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(record->buf, (char *)persistent_ram_old(prz) + header_len= gth, ^~~~~~ fs/pstore/ram.c:728:3: warning: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memset(pdata, 0, sizeof(*pdata)); ^~~~~~ fs/pstore/ram.c:728:3: note: Call to function 'memset' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memset_s' in case of C11 memset(pdata, 0, sizeof(*pdata)); ^~~~~~ fs/pstore/ram.c:920:2: warning: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memset(&pdata, 0, sizeof(pdata)); ^~~~~~ fs/pstore/ram.c:920:2: note: Call to function 'memset' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memset_s' in case of C11 memset(&pdata, 0, sizeof(pdata)); ^~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/i2c/i2c-mux.c:328:2: warning: Call to function 'snprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(priv->adap.name, sizeof(priv->adap.name), ^~~~~~~~ drivers/i2c/i2c-mux.c:328:2: note: Call to function 'snprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'snprintf_s' in case of C11 snprintf(priv->adap.name, sizeof(priv->adap.name), ^~~~~~~~ drivers/i2c/i2c-mux.c:424:2: warning: Call to function 'snprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(symlink_name, sizeof(symlink_name), "channel-%u", chan_= id); ^~~~~~~~ drivers/i2c/i2c-mux.c:424:2: note: Call to function 'snprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'snprintf_s' in case of C11 snprintf(symlink_name, sizeof(symlink_name), "channel-%u", chan_= id); ^~~~~~~~ drivers/i2c/i2c-mux.c:451:3: warning: Call to function 'snprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(symlink_name, sizeof(symlink_name), ^~~~~~~~ drivers/i2c/i2c-mux.c:451:3: note: Call to function 'snprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'snprintf_s' in case of C11 snprintf(symlink_name, sizeof(symlink_name), ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/i2c/algos/i2c-algo-pcf.c:322:3: warning: Value stored to 'ret' i= s never read [clang-analyzer-deadcode.DeadStores] ret =3D pcf_doAddress(adap, pmsg); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/i2c/algos/i2c-algo-pcf.c:322:3: note: Value stored to 'ret' is n= ever read ret =3D pcf_doAddress(adap, pmsg); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/media/dvb-frontends/s5h1432.c:207:4: warning: Value stored to 'd= vb_bandwidth' is never read [clang-analyzer-deadcode.DeadStores] dvb_bandwidth =3D 6; ^ ~ drivers/media/dvb-frontends/s5h1432.c:207:4: note: Value stored to 'dvb_= bandwidth' is never read dvb_bandwidth =3D 6; ^ ~ drivers/media/dvb-frontends/s5h1432.c:211:4: warning: Value stored to 'd= vb_bandwidth' is never read [clang-analyzer-deadcode.DeadStores] dvb_bandwidth =3D 7; ^ ~ drivers/media/dvb-frontends/s5h1432.c:211:4: note: Value stored to 'dvb_= bandwidth' is never read dvb_bandwidth =3D 7; ^ ~ drivers/media/dvb-frontends/s5h1432.c:215:4: warning: Value stored to 'd= vb_bandwidth' is never read [clang-analyzer-deadcode.DeadStores] dvb_bandwidth =3D 8; ^ ~ drivers/media/dvb-frontends/s5h1432.c:215:4: note: Value stored to 'dvb_= bandwidth' is never read dvb_bandwidth =3D 8; ^ ~ >> drivers/media/dvb-frontends/s5h1432.c:351:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &s5h1432_ops, ^~~~~~ drivers/media/dvb-frontends/s5h1432.c:351:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &s5h1432_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/cx24110.c:606:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &cx24110_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/cx24110.c:606:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &cx24110_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 57 warnings generated. fs/xfs/libxfs/xfs_dir2_leaf.c:314:3: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(leaf3, 0, sizeof(*leaf3)); ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:314:3: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(leaf3, 0, sizeof(*leaf3)); ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:323:3: warning: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(leaf, 0, sizeof(*leaf)); ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:323:3: note: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 memset(leaf, 0, sizeof(*leaf)); ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:440:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(leafhdr.ents, blp, ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:440:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(leafhdr.ents, blp, ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:536:4: warning: Call to function 'memmove'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memmove_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(lep + 1, lep, ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:536:4: note: Call to function 'memmove' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memmove_s' in case of C11 memmove(lep + 1, lep, ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:575:4: warning: Call to function 'memmove'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memmove_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(&ents[lowstale], &ents[lowstale + 1], ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:575:4: note: Call to function 'memmove' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memmove_s' in case of C11 memmove(&ents[lowstale], &ents[lowstale + 1], ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:596:3: warning: Call to function 'memmove'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memmove_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(&ents[index + 1], &ents[index], ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:596:3: note: Call to function 'memmove' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memmove_s' in case of C11 memmove(&ents[index + 1], &ents[index], ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:810:4: warning: Call to function 'memmove'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memmove_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(&bestsp[0], &bestsp[1], ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:810:4: note: Call to function 'memmove' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memmove_s' in case of C11 memmove(&bestsp[0], &bestsp[1], ^~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:864:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dep->name, args->name, dep->namelen); ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:864:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(dep->name, args->name, dep->namelen); ^~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:1285:43: warning: Access to field 'b_addr'= results in a dereference of a null pointer (loaded from variable 'dbp') [c= lang-analyzer-core.NullDereference] dep =3D (xfs_dir2_data_entry_t *)((char *)dbp->b_addr + ^ fs/xfs/libxfs/xfs_dir2_leaf.c:1506:10: note: Calling 'xfs_dir2_leaf_look= up_int' error =3D xfs_dir2_leaf_lookup_int(args, &lbp, &index, &dbp, &le= afhdr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:1217:2: note: 'dbp' initialized to a null = pointer value struct xfs_buf *dbp =3D NULL; /* data buffer */ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:1235:10: note: Calling 'xfs_dir3_leaf_read' error =3D xfs_dir3_leaf_read(tp, dp, args->geo->leafblk, &lbp); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:275:6: note: Assuming 'err' is 0, which pa= rticipates in a condition later if (!err && tp && *bpp) ^~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:275:6: note: Left side of '&&' is true fs/xfs/libxfs/xfs_dir2_leaf.c:275:14: note: Assuming 'tp' is null if (!err && tp && *bpp) ^~ fs/xfs/libxfs/xfs_dir2_leaf.c:275:17: note: Left side of '&&' is false if (!err && tp && *bpp) ^ fs/xfs/libxfs/xfs_dir2_leaf.c:277:2: note: Returning zero (loaded from '= err'), which participates in a condition later return err; ^~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:1235:10: note: Returning from 'xfs_dir3_le= af_read' error =3D xfs_dir3_leaf_read(tp, dp, args->geo->leafblk, &lbp); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:1236:6: note: 'error' is 0 if (error) ^~~~~ fs/xfs/libxfs/xfs_dir2_leaf.c:1236:2: note: Taking false branch if (error) ^ fs/xfs/libxfs/xfs_dir2_leaf.c:1253:7: note: Assuming 'index' is < field = 'count' -- ^ drivers/hwmon/tmp513.c:679:3: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data->nfactor, nfactor, (data->id =3D=3D tmp513) = ? 3 : 2); ^~~~~~ drivers/hwmon/tmp513.c:679:3: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(data->nfactor, nfactor, (data->id =3D=3D tmp513) = ? 3 : 2); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 56 warnings generated. block/partitions/core.c:140:2: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(state->name, BDEVNAME_SIZE, "%s", hd->disk_name); ^~~~~~~~ block/partitions/core.c:140:2: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(state->name, BDEVNAME_SIZE, "%s", hd->disk_name); ^~~~~~~~ block/partitions/core.c:141:2: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(state->pp_buf, PAGE_SIZE, " %s:", state->name); ^~~~~~~~ block/partitions/core.c:141:2: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(state->pp_buf, PAGE_SIZE, " %s:", state->name); ^~~~~~~~ block/partitions/core.c:143:3: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(state->name, "p"); ^~~~~~~ block/partitions/core.c:143:3: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 sprintf(state->name, "p"); ^~~~~~~ block/partitions/core.c:147:3: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(state->parts, 0, state->limit * sizeof(state->par= ts[0])); ^~~~~~ block/partitions/core.c:147:3: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(state->parts, 0, state->limit * sizeof(state->par= ts[0])); ^~~~~~ block/partitions/core.c:186:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", dev_to_bdev(dev)->bd_partno); ^~~~~~~ block/partitions/core.c:186:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", dev_to_bdev(dev)->bd_partno); ^~~~~~~ block/partitions/core.c:192:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%llu\n", dev_to_bdev(dev)->bd_start_sect); ^~~~~~~ block/partitions/core.c:192:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%llu\n", dev_to_bdev(dev)->bd_start_sect); ^~~~~~~ block/partitions/core.c:198:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", bdev_read_only(dev_to_bdev(dev))); ^~~~~~~ block/partitions/core.c:198:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", bdev_read_only(dev_to_bdev(dev))); ^~~~~~~ block/partitions/core.c:206:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%u\n", ^~~~~~~ block/partitions/core.c:206:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%u\n", ^~~~~~~ block/partitions/core.c:216:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%u\n", ^~~~~~~ block/partitions/core.c:216:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%u\n", ^~~~~~~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 14 warnings generated. drivers/leds/trigger/ledtrig-transient.c:48:9: warning: Call to function= 'sprintf' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'sprintf_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", transient_data->activate); ^~~~~~~ drivers/leds/trigger/ledtrig-transient.c:48:9: note: Call to function 's= printf' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", transient_data->activate); ^~~~~~~ drivers/leds/trigger/ledtrig-transient.c:100:9: warning: Call to functio= n 'sprintf' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'sprintf_s' in case of C11 [cla= ng-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%lu\n", transient_data->duration); ^~~~~~~ drivers/leds/trigger/ledtrig-transient.c:100:9: note: Call to function '= sprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%lu\n", transient_data->duration); ^~~~~~~ drivers/leds/trigger/ledtrig-transient.c:127:9: warning: Call to functio= n 'sprintf' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'sprintf_s' in case of C11 [cla= ng-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", state); ^~~~~~~ drivers/leds/trigger/ledtrig-transient.c:127:9: note: Call to function '= sprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", state); ^~~~~~~ Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 12 warnings generated. drivers/leds/trigger/ledtrig-pattern.c:230:12: warning: Call to function= 'sscanf' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'sscanf_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] ccount =3D sscanf(buf + offset, "%u %u %n", ^~~~~~ drivers/leds/trigger/ledtrig-pattern.c:230:12: note: Call to function 's= scanf' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'sscanf_s' in case of C11 ccount =3D sscanf(buf + offset, "%u %u %n", ^~~~~~ Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. >> drivers/media/dvb-frontends/stv6111.c:325:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&d[1], &state->reg[reg], len); ^~~~~~ drivers/media/dvb-frontends/stv6111.c:325:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&d[1], &state->reg[reg], len); ^~~~~~ drivers/media/dvb-frontends/stv6111.c:464:2: warning: Value stored to 'i= cp' is never read [clang-analyzer-deadcode.DeadStores] icp =3D 0; ^ ~ drivers/media/dvb-frontends/stv6111.c:464:2: note: Value stored to 'icp'= is never read icp =3D 0; ^ ~ drivers/media/dvb-frontends/stv6111.c:661:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &tuner_ops, sizeof(struct dvb_tuner_o= ps)); ^~~~~~ drivers/media/dvb-frontends/stv6111.c:661:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &tuner_ops, sizeof(struct dvb_tuner_o= ps)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 56 warnings generated. >> drivers/media/dvb-frontends/mxl5xx.c:230:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf[6], reg_data_ptr, size); ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:230:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf[6], reg_data_ptr, size); ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:412:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] BUILD_HYDRA_CMD(MXL_HYDRA_ABORT_TUNE_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:412:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 BUILD_HYDRA_CMD(MXL_HYDRA_ABORT_TUNE_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:482:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] BUILD_HYDRA_CMD(MXL_HYDRA_DEMOD_SET_PARAM_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:482:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 BUILD_HYDRA_CMD(MXL_HYDRA_DEMOD_SET_PARAM_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:552:35: warning: Assigned value is = garbage or undefined [clang-analyzer-core.uninitialized.Assign] p->pre_bit_error.stat[0].uvalue =3D reg[2]; ^ drivers/media/dvb-frontends/mxl5xx.c:656:6: note: Assuming 're_tune' is = false if (re_tune) { ^~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:656:2: note: Taking false branch if (re_tune) { ^ drivers/media/dvb-frontends/mxl5xx.c:663:9: note: Calling 'read_status' return read_status(fe, status); ^~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:624:13: note: Assuming 'reg_data' i= s equal to 1 *status =3D (reg_data =3D=3D 1) ? 0x1f : 0; ^~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:624:12: note: '?' condition is true *status =3D (reg_data =3D=3D 1) ? 0x1f : 0; ^ drivers/media/dvb-frontends/mxl5xx.c:629:2: note: Calling 'read_signal_s= trength' read_signal_strength(fe); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:607:2: note: Returning without writ= ing to 'fe->dtv_property_cache.delivery_system', which participates in a co= ndition later return stat; ^ drivers/media/dvb-frontends/mxl5xx.c:629:2: note: Returning from 'read_s= ignal_strength' read_signal_strength(fe); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:631:2: note: Taking true branch if (*status & FE_HAS_CARRIER) ^ drivers/media/dvb-frontends/mxl5xx.c:632:3: note: Calling 'read_snr' read_snr(fe); ^~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:530:2: note: Returning without writ= ing to 'fe->dtv_property_cache.delivery_system', which participates in a co= ndition later return stat; ^ drivers/media/dvb-frontends/mxl5xx.c:632:3: note: Returning from 'read_s= nr' read_snr(fe); ^~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:636:2: note: Taking true branch if (*status & FE_HAS_SYNC) ^ drivers/media/dvb-frontends/mxl5xx.c:637:3: note: Calling 'read_ber' read_ber(fe); ^~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:541:2: note: Calling 'read_register= _block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:279:7: note: 'stat' is -1 if (!stat) { ^~~~ drivers/media/dvb-frontends/mxl5xx.c:279:2: note: Taking false branch if (!stat) { ^ drivers/media/dvb-frontends/mxl5xx.c:541:2: note: Returning from 'read_r= egister_block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:548:2: note: Control jumps to 'case= SYS_DVBS:' at line 550 switch (p->delivery_system) { ^ drivers/media/dvb-frontends/mxl5xx.c:552:35: note: Assigned value is gar= bage or undefined p->pre_bit_error.stat[0].uvalue =3D reg[2]; ^ ~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:576:36: warning: Assigned value is = garbage or undefined [clang-analyzer-core.uninitialized.Assign] p->post_bit_error.stat[0].uvalue =3D reg[1]; ^ drivers/media/dvb-frontends/mxl5xx.c:656:6: note: Assuming 're_tune' is = false if (re_tune) { ^~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:656:2: note: Taking false branch if (re_tune) { -- ^~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:530:2: note: Returning without writ= ing to 'fe->dtv_property_cache.delivery_system', which participates in a co= ndition later return stat; ^ drivers/media/dvb-frontends/mxl5xx.c:632:3: note: Returning from 'read_s= nr' read_snr(fe); ^~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:636:2: note: Taking true branch if (*status & FE_HAS_SYNC) ^ drivers/media/dvb-frontends/mxl5xx.c:637:3: note: Calling 'read_ber' read_ber(fe); ^~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:541:2: note: Calling 'read_register= _block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:279:7: note: 'stat' is -1 if (!stat) { ^~~~ drivers/media/dvb-frontends/mxl5xx.c:279:2: note: Taking false branch if (!stat) { ^ drivers/media/dvb-frontends/mxl5xx.c:541:2: note: Returning from 'read_r= egister_block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:548:2: note: Control jumps to the '= default' case at line 556 switch (p->delivery_system) { ^ drivers/media/dvb-frontends/mxl5xx.c:557:3: note: Execution continues o= n line 560 break; ^ drivers/media/dvb-frontends/mxl5xx.c:560:2: note: Calling 'read_register= _block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:279:7: note: 'stat' is -1 if (!stat) { ^~~~ drivers/media/dvb-frontends/mxl5xx.c:279:2: note: Taking false branch if (!stat) { ^ drivers/media/dvb-frontends/mxl5xx.c:560:2: note: Returning from 'read_r= egister_block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:566:2: note: Control jumps to 'case= SYS_DVBS2:' at line 574 switch (p->delivery_system) { ^ drivers/media/dvb-frontends/mxl5xx.c:576:36: note: Assigned value is gar= bage or undefined p->post_bit_error.stat[0].uvalue =3D reg[1]; ^ ~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:705:17: warning: Assigned value is = garbage or undefined [clang-analyzer-core.uninitialized.Assign] p->symbol_rate =3D reg_data[DMD_SYMBOL_RATE_ADDR]; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:688:2: note: Calling 'read_register= _block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:279:7: note: 'stat' is -1 if (!stat) { ^~~~ drivers/media/dvb-frontends/mxl5xx.c:279:2: note: Taking false branch if (!stat) { ^ drivers/media/dvb-frontends/mxl5xx.c:688:2: note: Returning from 'read_r= egister_block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:702:2: note: Taking false branch dev_dbg(state->i2cdev, "freq=3D%u delsys=3D%u srate=3D%u\n", ^ include/linux/dev_printk.h:162:2: note: expanded from macro 'dev_dbg' if (0) \ ^ drivers/media/dvb-frontends/mxl5xx.c:705:17: note: Assigned value is gar= bage or undefined p->symbol_rate =3D reg_data[DMD_SYMBOL_RATE_ADDR]; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:706:15: warning: Assigned value is = garbage or undefined [clang-analyzer-core.uninitialized.Assign] p->frequency =3D freq; ^ ~~~~ drivers/media/dvb-frontends/mxl5xx.c:684:2: note: 'freq' declared withou= t an initial value u32 freq; ^~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:694:2: note: Calling 'read_register= _block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:279:7: note: 'stat' is -1 if (!stat) { ^~~~ drivers/media/dvb-frontends/mxl5xx.c:279:2: note: Taking false branch if (!stat) { ^ drivers/media/dvb-frontends/mxl5xx.c:694:2: note: Returning from 'read_r= egister_block' read_register_block(state, ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/mxl5xx.c:702:2: note: Taking false branch dev_dbg(state->i2cdev, "freq=3D%u delsys=3D%u srate=3D%u\n", ^ include/linux/dev_printk.h:162:2: note: expanded from macro 'dev_dbg' if (0) \ ^ drivers/media/dvb-frontends/mxl5xx.c:706:15: note: Assigned value is gar= bage or undefined p->frequency =3D freq; ^ ~~~~ >> drivers/media/dvb-frontends/mxl5xx.c:862:3: warning: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset((void *) w_buf_ptr, 0, size); ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:862:3: note: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 memset((void *) w_buf_ptr, 0, size); ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:863:3: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy((void *) w_buf_ptr, (void *) data_ptr, orig_size); ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:863:3: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy((void *) w_buf_ptr, (void *) data_ptr, orig_size); ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:1041:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] BUILD_HYDRA_CMD(MXL_HYDRA_DEV_CFG_SKU_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:1041:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 BUILD_HYDRA_CMD(MXL_HYDRA_DEV_CFG_SKU_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:1356:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] BUILD_HYDRA_CMD(MXL_HYDRA_TUNER_ACTIVATE_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ drivers/media/dvb-frontends/mxl5xx.c:1356:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 BUILD_HYDRA_CMD(MXL_HYDRA_TUNER_ACTIVATE_CMD, MXL_CMD_WRITE, ^ drivers/media/dvb-frontends/mxl5xx_defs.h:196:3: note: expanded from mac= ro 'BUILD_HYDRA_CMD' memcpy((void *)&cmd_buff[6], data_ptr, size); \ ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/hwmon/lm75.h:30:29: warning: The result of the left shift is und= efined because the left operand is negative [clang-analyzer-core.UndefinedB= inaryOperatorResult] return (u16)((ntemp / 500) << 7); ^ drivers/hwmon/nct6775.c:2494:6: note: Assuming 'err' is >=3D 0 if (err < 0) ^~~~~~~ drivers/hwmon/nct6775.c:2494:2: note: Taking false branch if (err < 0) ^ drivers/hwmon/nct6775.c:2498:26: note: Calling 'LM75_TEMP_TO_REG' data->temp[index][nr] =3D LM75_TEMP_TO_REG(val); ^~~~~~~~~~~~~~~~~~~~~ drivers/hwmon/lm75.h:27:14: note: Assuming '__UNIQUE_ID___x174' is <=3D = '__UNIQUE_ID___y175' int ntemp =3D clamp_val(temp, LM75_TEMP_MIN, LM75_TEMP_MAX); ^ include/linux/minmax.h:137:32: note: expanded from macro 'clamp_val' #define clamp_val(val, lo, hi) clamp_t(typeof(val), val, lo, hi) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:124:48: note: expanded from macro 'clamp_t' #define clamp_t(type, val, lo, hi) min_t(type, max_t(type, val, lo), hi) ~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:112:27: note: expanded from macro 'max_t' #define max_t(type, x, y) __careful_cmp((type)(x), (type)(y), >) ^ note: (skipping 3 expansions in backtrace; use -fmacro-backtrace-limit= =3D0 to see all) include/linux/minmax.h:104:48: note: expanded from macro 'min_t' #define min_t(type, x, y) __careful_cmp((type)(x), (type)(y), <) ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~ include/linux/minmax.h:38:14: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:31:25: note: expanded from macro '__cmp_once' typeof(x) unique_x =3D (x); \ ^ drivers/hwmon/lm75.h:27:14: note: '?' condition is false int ntemp =3D clamp_val(temp, LM75_TEMP_MIN, LM75_TEMP_MAX); ^ include/linux/minmax.h:137:32: note: expanded from macro 'clamp_val' #define clamp_val(val, lo, hi) clamp_t(typeof(val), val, lo, hi) ^ include/linux/minmax.h:124:48: note: expanded from macro 'clamp_t' #define clamp_t(type, val, lo, hi) min_t(type, max_t(type, val, lo), hi) ^ include/linux/minmax.h:112:27: note: expanded from macro 'max_t' #define max_t(type, x, y) __careful_cmp((type)(x), (type)(y), >) ^ include/linux/minmax.h:38:3: note: expanded from macro '__careful_cmp' __cmp_once(x, y, __UNIQUE_ID(__x), __UNIQUE_ID(__y), op)) ^ include/linux/minmax.h:33:3: note: expanded from macro '__cmp_once' __cmp(unique_x, unique_y, op); }) ^ include/linux/minmax.h:28:26: note: expanded from macro '__cmp' #define __cmp(x, y, op) ((x) op (y) ? (x) : (y)) ^ drivers/hwmon/lm75.h:27:14: note: '__UNIQUE_ID___x176' is < '__UNIQUE_ID= ___y177' int ntemp =3D clamp_val(temp, LM75_TEMP_MIN, LM75_TEMP_MAX); ^ include/linux/minmax.h:137:32: note: expanded from macro 'clamp_val' #define clamp_val(val, lo, hi) clamp_t(typeof(val), val, lo, hi) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/minmax.h:124:36: note: expanded from macro 'clamp_t' -- ^~~~~~ drivers/md/dm-ima.c:632:3: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(device_table_data + l, md->ima.inactive_table.dev= ice_metadata, ^~~~~~ drivers/md/dm-ima.c:632:3: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(device_table_data + l, md->ima.inactive_table.dev= ice_metadata, ^~~~~~ drivers/md/dm-ima.c:636:3: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(device_table_data + l, inactive_str, inactive_len= ); ^~~~~~ drivers/md/dm-ima.c:636:3: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(device_table_data + l, inactive_str, inactive_len= ); ^~~~~~ drivers/md/dm-ima.c:639:3: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(device_table_data + l, md->ima.inactive_table.has= h, ^~~~~~ drivers/md/dm-ima.c:639:3: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(device_table_data + l, md->ima.inactive_table.has= h, ^~~~~~ drivers/md/dm-ima.c:644:3: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(device_table_data + l, ";", 1); ^~~~~~ drivers/md/dm-ima.c:644:3: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(device_table_data + l, ";", 1); ^~~~~~ drivers/md/dm-ima.c:661:2: warning: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(device_table_data + l, capacity_str, capacity_len); ^~~~~~ drivers/md/dm-ima.c:661:2: note: Call to function 'memcpy' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memcpy_s' in case of C11 memcpy(device_table_data + l, capacity_str, capacity_len); ^~~~~~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 28 warnings generated. drivers/hwmon/vt1211.c:368:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:368:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:442:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:442:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:518:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:518:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:624:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:624:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", res); ^~~~~~~ drivers/hwmon/vt1211.c:760:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", TEMP_FROM_REG(data->pwm_ctl[ix] & 7, ^~~~~~~ drivers/hwmon/vt1211.c:760:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", TEMP_FROM_REG(data->pwm_ctl[ix] & 7, ^~~~~~~ drivers/hwmon/vt1211.c:824:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->pwm_auto_pwm[ix][ap]); ^~~~~~~ drivers/hwmon/vt1211.c:824:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->pwm_auto_pwm[ix][ap]); ^~~~~~~ drivers/hwmon/vt1211.c:861:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->vrm); ^~~~~~~ drivers/hwmon/vt1211.c:861:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->vrm); ^~~~~~~ drivers/hwmon/vt1211.c:888:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", vid_from_reg(data->vid, data->vrm)); ^~~~~~~ drivers/hwmon/vt1211.c:888:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", vid_from_reg(data->vid, data->vrm)); ^~~~~~~ drivers/hwmon/vt1211.c:896:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide bounding of the memory buffer or security chec= ks introduced in the C11 standard. Replace with analogous functions that su= pport length arguments or provides boundary checks such as 'sprintf_s' in c= ase of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHan= dling] return sprintf(buf, "%s\n", data->name); ^~~~~~~ drivers/hwmon/vt1211.c:896:9: note: Call to function 'sprintf' is insecu= re as it does not provide bounding of the memory buffer or security checks = introduced in the C11 standard. Replace with analogous functions that suppo= rt length arguments or provides boundary checks such as 'sprintf_s' in case= of C11 return sprintf(buf, "%s\n", data->name); ^~~~~~~ drivers/hwmon/vt1211.c:904:9: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->alarms); ^~~~~~~ drivers/hwmon/vt1211.c:904:9: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->alarms); ^~~~~~~ Suppressed 18 warnings (17 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. >> drivers/media/dvb-frontends/nxt200x.c:98:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf2[1], buf, len); ^~~~~~ drivers/media/dvb-frontends/nxt200x.c:98:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf2[1], buf, len); ^~~~~~ drivers/media/dvb-frontends/nxt200x.c:1175:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &nxt200x_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/nxt200x.c:1175:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &nxt200x_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/or51211.c:515:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &or51211_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/or51211.c:515:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &or51211_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/tda8083.c:431:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &tda8083_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/tda8083.c:431:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &tda8083_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/dib3000mc.c:923:2: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&st->demod.ops, &dib3000mc_ops, sizeof(struct dvb_fronten= d_ops)); ^~~~~~ drivers/media/dvb-frontends/dib3000mc.c:923:2: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&st->demod.ops, &dib3000mc_ops, sizeof(struct dvb_fronten= d_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 51 warnings generated. drivers/media/dvb-frontends/dibx000_common.c:34:2: warning: Call to func= tion 'memset' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memset_s' in case of C11 [cl= ang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(mst->msg, 0, sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:34:2: note: Call to functio= n 'memset' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memset_s' in case of C11 memset(mst->msg, 0, sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:58:2: warning: Call to func= tion 'memset' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memset_s' in case of C11 [cl= ang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(mst->msg, 0, 2 * sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:58:2: note: Call to functio= n 'memset' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memset_s' in case of C11 memset(mst->msg, 0, 2 * sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:304:2: warning: Call to fun= ction 'memset' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memset_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(mst->msg, 0, sizeof(struct i2c_msg) * (2 + num)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:304:2: note: Call to functi= on 'memset' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memset_s' in case of C11 memset(mst->msg, 0, sizeof(struct i2c_msg) * (2 + num)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:312:2: warning: Call to fun= ction 'memcpy' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memcpy_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&mst->msg[1], msg, sizeof(struct i2c_msg) * num); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:312:2: note: Call to functi= on 'memcpy' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&mst->msg[1], msg, sizeof(struct i2c_msg) * num); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:350:2: warning: Call to fun= ction 'memset' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memset_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(mst->msg, 0, sizeof(struct i2c_msg) * (2 + num)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:350:2: note: Call to functi= on 'memset' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memset_s' in case of C11 memset(mst->msg, 0, sizeof(struct i2c_msg) * (2 + num)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:358:2: warning: Call to fun= ction 'memcpy' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memcpy_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&mst->msg[1], msg, sizeof(struct i2c_msg) * num); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:358:2: note: Call to functi= on 'memcpy' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&mst->msg[1], msg, sizeof(struct i2c_msg) * num); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:447:2: warning: Call to fun= ction 'memset' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memset_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(mst->msg, 0, sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dibx000_common.c:447:2: note: Call to functi= on 'memset' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memset_s' in case of C11 memset(mst->msg, 0, sizeof(struct i2c_msg)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (46 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 140 warnings generated. drivers/hid/hid-picolcd_debugfs.c:124:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(raw_data, 0, sizeof(raw_data)); ^~~~~~ drivers/hid/hid-picolcd_debugfs.c:124:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(raw_data, 0, sizeof(raw_data)); ^~~~~~ drivers/hid/hid-picolcd_debugfs.c:406:2: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buff, BUFF_SZ, "\nout report %d (size %d) =3D ", ^~~~~~~~ drivers/hid/hid-picolcd_debugfs.c:406:2: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(buff, BUFF_SZ, "\nout report %d (size %d) =3D ", ^~~~~~~~ drivers/hid/hid-picolcd_debugfs.c:417:3: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buff, BUFF_SZ, "out report %s (%d, size=3D%d)\n= ", ^~~~~~~~ drivers/hid/hid-picolcd_debugfs.c:417:3: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(buff, BUFF_SZ, "out report %s (%d, size=3D%d)\n= ", ^~~~~~~~ drivers/hid/hid-picolcd_debugfs.c:420:3: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buff, BUFF_SZ, "\tGPO state: 0x%02x\n", raw_dat= a[1]); ^~~~~~~~ drivers/hid/hid-picolcd_debugfs.c:420:3: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(buff, BUFF_SZ, "\tGPO state: 0x%02x\n", raw_dat= a[1]); -- ^ drivers/mmc/core/sdio_bus.c:57:9: note: expanded from macro 'sdio_info_a= ttr' return sprintf(buf, "%s\n", func->info[num-1]); = \ ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/power/supply/bq2515x_charger.c:1095:2: warning: Call to function= 'strncpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'strncpy_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(bq2515x->model_name, id->name, I2C_NAME_SIZE); ^~~~~~~ drivers/power/supply/bq2515x_charger.c:1095:2: note: Call to function 's= trncpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'strncpy_s' in case of C11 strncpy(bq2515x->model_name, id->name, I2C_NAME_SIZE); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/power/supply/bq25980_charger.c:820:27: warning: The right operan= d of '!=3D' is a garbage value [clang-analyzer-core.UndefinedBinaryOperator= Result] return (old_state.dischg !=3D new_state->dischg || ^ drivers/power/supply/bq25980_charger.c:837:8: note: Calling 'bq25980_get= _state' ret =3D bq25980_get_state(bq, &state); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/power/supply/bq25980_charger.c:571:6: note: Assuming 'ret' is no= t equal to 0 if (ret) ^~~ drivers/power/supply/bq25980_charger.c:571:2: note: Taking true branch if (ret) ^ drivers/power/supply/bq25980_charger.c:572:3: note: Returning without wr= iting to 'state->dischg' return ret; ^ drivers/power/supply/bq25980_charger.c:837:8: note: Returning from 'bq25= 980_get_state' ret =3D bq25980_get_state(bq, &state); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/power/supply/bq25980_charger.c:838:6: note: Assuming 'ret' is >= =3D 0 if (ret < 0) ^~~~~~~ drivers/power/supply/bq25980_charger.c:838:2: note: Taking false branch if (ret < 0) ^ drivers/power/supply/bq25980_charger.c:841:7: note: Calling 'bq25980_sta= te_changed' if (!bq25980_state_changed(bq, &state)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/power/supply/bq25980_charger.c:820:27: note: The right operand o= f '!=3D' is a garbage value return (old_state.dischg !=3D new_state->dischg || ^ ~~~~~~~~~~~~~~~~~ drivers/power/supply/bq25980_charger.c:1226:2: warning: Call to function= 'strncpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'strncpy_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(bq->model_name, id->name, I2C_NAME_SIZE); ^~~~~~~ drivers/power/supply/bq25980_charger.c:1226:2: note: Call to function 's= trncpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'strncpy_s' in case of C11 strncpy(bq->model_name, id->name, I2C_NAME_SIZE); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 36 warnings generated. drivers/firmware/memmap.c:301:3: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(entry, 0, sizeof(*entry)); ^~~~~~ drivers/firmware/memmap.c:301:3: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(entry, 0, sizeof(*entry)); ^~~~~~ drivers/firmware/memmap.c:372:9: warning: Call to function 'snprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(buf, PAGE_SIZE, "0x%llx\n", ^~~~~~~~ drivers/firmware/memmap.c:372:9: note: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 return snprintf(buf, PAGE_SIZE, "0x%llx\n", ^~~~~~~~ drivers/firmware/memmap.c:378:9: warning: Call to function 'snprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(buf, PAGE_SIZE, "0x%llx\n", ^~~~~~~~ drivers/firmware/memmap.c:378:9: note: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 return snprintf(buf, PAGE_SIZE, "0x%llx\n", ^~~~~~~~ drivers/firmware/memmap.c:384:9: warning: Call to function 'snprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(buf, PAGE_SIZE, "%s\n", entry->type); ^~~~~~~~ drivers/firmware/memmap.c:384:9: note: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 return snprintf(buf, PAGE_SIZE, "%s\n", entry->type); ^~~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/or51132.c:566:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &or51132_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/or51132.c:566:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &or51132_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 58 warnings generated. >> drivers/media/dvb-frontends/bcm3510.c:88:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&b[1],buf,len); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:88:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&b[1],buf,len); ^~~~~~ >> drivers/media/dvb-frontends/bcm3510.c:112:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(buf,0,len); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:112:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(buf,0,len); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:222:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&ob[2],obuf,olen); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:222:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&ob[2],obuf,olen); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:239:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ibuf,&ib[2],ilen); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:239:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(ibuf,&ib[2],ilen); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:366:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&c,0,sizeof(struct bcm3510_hab_cmd_tune)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:366:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(&c,0,sizeof(struct bcm3510_hab_cmd_tune)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:503:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cmd,0,sizeof(cmd)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:503:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(&cmd,0,sizeof(cmd)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:575:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&st->status1,0,sizeof(st->status1)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:575:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(&st->status1,0,sizeof(st->status1)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:576:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&st->status2,0,sizeof(st->status2)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:576:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(&st->status2,0,sizeof(st->status2)); ^~~~~~ drivers/media/dvb-frontends/bcm3510.c:666:2: warning: 2nd function call = argument is an uninitialized value [clang-analyzer-core.CallAndMessage] deb_info("Version information: 0x%02x 0x%02x 0x%02x 0x%02x\n", ^ drivers/media/dvb-frontends/bcm3510.c:76:27: note: expanded from macro '= deb_info' #define deb_info(args...) dprintk(0x01,args) ^ drivers/media/dvb-frontends/bcm3510.c:70:48: note: expanded from macro '= dprintk' #define dprintk(level,x...) if (level & debug) printk(x) ^ include/linux/printk.h:446:44: note: expanded from macro 'printk' #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__) ^ drivers/media/dvb-frontends/bcm3510.c:766:2: note: Taking false branch if ((ret =3D bcm3510_readB(st,0xca,&j)) < 0) ^ drivers/media/dvb-frontends/bcm3510.c:769:2: note: Assuming the conditio= n is false deb_info("JDEC: %02x\n",j.raw); ^ drivers/media/dvb-frontends/bcm3510.c:76:35: note: expanded from macro '= deb_info' #define deb_info(args...) dprintk(0x01,args) ~~~~~~~~^~~~~~~~~~ drivers/media/dvb-frontends/bcm3510.c:70:33: note: expanded from macro '= dprintk' #define dprintk(level,x...) if (level & debug) printk(x) ^~~~~~~~~~~~~ drivers/media/dvb-frontends/bcm3510.c:769:2: note: Taking false branch deb_info("JDEC: %02x\n",j.raw); ^ drivers/media/dvb-frontends/bcm3510.c:76:27: note: expanded from macro '= deb_info' #define deb_info(args...) dprintk(0x01,args) ^ drivers/media/dvb-frontends/bcm3510.c:70:29: note: expanded from macro '= dprintk' #define dprintk(level,x...) if (level & debug) printk(x) ^ drivers/media/dvb-frontends/bcm3510.c:771:2: note: Control jumps to 'cas= e 4:' @line 777 switch (j.JDEC_ca.JDEC) { ^ drivers/media/dvb-frontends/bcm3510.c:778:4: note: Taking false branch deb_info("firmware is loaded\n"); ^ drivers/media/dvb-frontends/bcm3510.c:76:27: note: expanded from macro '= deb_info' #define deb_info(args...) dprintk(0x01,args) ^ drivers/media/dvb-frontends/bcm3510.c:70:29: note: expanded from macro '= dprintk' #define dprintk(level,x...) if (level & debug) printk(x) ^ drivers/media/dvb-frontends/bcm3510.c:779:4: note: Calling 'bcm3510_chec= k_firmware_version' bcm3510_check_firmware_version(st); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/bcm3510.c:664:2: note: Calling 'bcm3510_do_h= ab_cmd' bcm3510_do_hab_cmd(st,CMD_GET_VERSION_INFO,MSGID_GET_VERSION_INF= O,NULL,0,(u8*)&ver,sizeof(ver)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/bcm3510.c:210:2: note: Taking false branch if (ilen + 2 > sizeof(ib)) { ^ drivers/media/dvb-frontends/bcm3510.c:215:2: note: Taking false branch if (olen + 2 > sizeof(ob)) { ^ drivers/media/dvb-frontends/bcm3510.c:224:2: note: Assuming the conditio= n is false deb_hab("hab snd: "); -- 32 warnings generated. drivers/hid/hid-kye.c:684:6: warning: Access to field 'maxfield' results= in a dereference of an undefined pointer value (loaded from variable 'repo= rt') [clang-analyzer-core.NullDereference] if (report->maxfield < 1 || report->field[0]->report_count < 7) { ^ drivers/hid/hid-kye.c:708:6: note: Assuming 'ret' is 0 if (ret) { ^~~ drivers/hid/hid-kye.c:708:2: note: Taking false branch if (ret) { ^ drivers/hid/hid-kye.c:714:6: note: Assuming 'ret' is 0 if (ret) { ^~~ drivers/hid/hid-kye.c:714:2: note: Taking false branch if (ret) { ^ drivers/hid/hid-kye.c:719:2: note: Control jumps to 'case 20501:' @li= ne 725 switch (id->product) { ^ drivers/hid/hid-kye.c:726:9: note: Calling 'kye_tablet_enable' ret =3D kye_tablet_enable(hdev); ^~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-kye.c:669:2: note: 'report' declared without an initial = value struct hid_report *report; ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-kye.c:673:2: note: Loop condition is false. Execution co= ntinues on line 679 list_for_each(head, list) { ^ include/linux/list.h:580:2: note: expanded from macro 'list_for_each' for (pos =3D (head)->next; !list_is_head(pos, (head)); pos =3D p= os->next) ^ drivers/hid/hid-kye.c:679:6: note: Assuming 'head' is not equal to 'list' if (head =3D=3D list) { ^~~~~~~~~~~~ drivers/hid/hid-kye.c:679:2: note: Taking false branch if (head =3D=3D list) { ^ drivers/hid/hid-kye.c:684:6: note: Access to field 'maxfield' results in= a dereference of an undefined pointer value (loaded from variable 'report') if (report->maxfield < 1 || report->field[0]->report_count < 7) { ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/hid/hid-magicmouse.c:858:3: warning: Value stored to 'report' is= never read [clang-analyzer-deadcode.DeadStores] report =3D hid_register_report(hdev, HID_INPUT_REPORT, ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-magicmouse.c:858:3: note: Value stored to 'report' is ne= ver read report =3D hid_register_report(hdev, HID_INPUT_REPORT, ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. drivers/mtd/ubi/cdev.c:754:3: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(re->new_name, name, name_len); ^~~~~~ drivers/mtd/ubi/cdev.c:754:3: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(re->new_name, name, name_len); ^~~~~~ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 36 warnings generated. drivers/mtd/ubi/eba.c:624:3: warning: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(buf, 0xFF, len); ^~~~~~ drivers/mtd/ubi/eba.c:624:3: note: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 memset(buf, 0xFF, len); ^~~~~~ drivers/mtd/ubi/eba.c:837:2: warning: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ubi->peb_buf + offset, 0xFF, len); ^~~~~~ drivers/mtd/ubi/eba.c:837:2: note: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 memset(ubi->peb_buf + offset, 0xFF, len); ^~~~~~ drivers/mtd/ubi/eba.c:848:2: warning: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ubi->peb_buf + offset, buf, len); ^~~~~~ drivers/mtd/ubi/eba.c:848:2: note: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 memcpy(ubi->peb_buf + offset, buf, len); ^~~~~~ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/tua6100.c:185:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &tua6100_tuner_ops, sizeof(struct dvb= _tuner_ops)); ^~~~~~ drivers/media/dvb-frontends/tua6100.c:185:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &tua6100_tuner_ops, sizeof(struct dvb= _tuner_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/s5h1409.c:965:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &s5h1409_ops, ^~~~~~ drivers/media/dvb-frontends/s5h1409.c:965:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &s5h1409_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/cx24113.c:583:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->ops.tuner_ops, &cx24113_tuner_ops, ^~~~~~ drivers/media/dvb-frontends/cx24113.c:583:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&fe->ops.tuner_ops, &cx24113_tuner_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/hwmon/w83l785ts.c:117:9: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", TEMP_FROM_REG(data->temp[attr->index= ])); ^~~~~~~ drivers/hwmon/w83l785ts.c:117:9: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", TEMP_FROM_REG(data->temp[attr->index= ])); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 55 warnings generated. drivers/hwmon/w83l786ng.c:232:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] show_in_reg(in) ^ drivers/hwmon/w83l786ng.c:229:9: note: expanded from macro 'show_in_reg' return sprintf(buf, "%d\n", IN_FROM_REG(data->reg[nr])); \ ^~~~~~~ drivers/hwmon/w83l786ng.c:232:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 show_in_reg(in) ^ drivers/hwmon/w83l786ng.c:229:9: note: expanded from macro 'show_in_reg' return sprintf(buf, "%d\n", IN_FROM_REG(data->reg[nr])); \ ^~~~~~~ drivers/hwmon/w83l786ng.c:233:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] show_in_reg(in_min) ^ drivers/hwmon/w83l786ng.c:229:9: note: expanded from macro 'show_in_reg' return sprintf(buf, "%d\n", IN_FROM_REG(data->reg[nr])); \ ^~~~~~~ drivers/hwmon/w83l786ng.c:233:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 show_in_reg(in_min) ^ drivers/hwmon/w83l786ng.c:229:9: note: expanded from macro 'show_in_reg' return sprintf(buf, "%d\n", IN_FROM_REG(data->reg[nr])); \ ^~~~~~~ drivers/hwmon/w83l786ng.c:234:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] show_in_reg(in_max) ^ drivers/hwmon/w83l786ng.c:229:9: note: expanded from macro 'show_in_reg' return sprintf(buf, "%d\n", IN_FROM_REG(data->reg[nr])); \ ^~~~~~~ drivers/hwmon/w83l786ng.c:234:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 show_in_reg(in_max) ^ drivers/hwmon/w83l786ng.c:229:9: note: expanded from macro 'show_in_reg' return sprintf(buf, "%d\n", IN_FROM_REG(data->reg[nr])); \ ^~~~~~~ drivers/hwmon/w83l786ng.c:287:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] show_fan_reg(fan); ^ drivers/hwmon/w83l786ng.c:283:9: note: expanded from macro 'show_fan_reg' return sprintf(buf, "%d\n", \ ^~~~~~~ drivers/hwmon/w83l786ng.c:287:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 show_fan_reg(fan); ^ drivers/hwmon/w83l786ng.c:283:9: note: expanded from macro 'show_fan_reg' return sprintf(buf, "%d\n", \ ^~~~~~~ drivers/hwmon/w83l786ng.c:288:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] show_fan_reg(fan_min); ^ drivers/hwmon/w83l786ng.c:283:9: note: expanded from macro 'show_fan_reg' return sprintf(buf, "%d\n", \ ^~~~~~~ drivers/hwmon/w83l786ng.c:288:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 show_fan_reg(fan_min); ^ drivers/hwmon/w83l786ng.c:283:9: note: expanded from macro 'show_fan_reg' return sprintf(buf, "%d\n", \ ^~~~~~~ drivers/hwmon/w83l786ng.c:319:9: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%u\n", DIV_FROM_REG(data->fan_div[nr])); ^~~~~~~ drivers/hwmon/w83l786ng.c:319:9: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%u\n", DIV_FROM_REG(data->fan_div[nr])); ^~~~~~~ drivers/hwmon/w83l786ng.c:413:9: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", TEMP_FROM_REG(data->temp[nr][index])= ); ^~~~~~~ drivers/hwmon/w83l786ng.c:413:9: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", TEMP_FROM_REG(data->temp[nr][index])= ); ^~~~~~~ drivers/hwmon/w83l786ng.c:470:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] show_pwm_reg(pwm_mode) -- ^ drivers/scsi/scsi_sysfs.c:1001:2: note: expanded from macro 'DECLARE_EVT' DECLARE_EVT_SHOW(name, Cap_name) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/scsi_sysfs.c:981:9: note: expanded from macro 'DECLARE_EVT_= SHOW' return snprintf(buf, 20, "%d\n", val); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1010:1: note: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 DECLARE_EVT(soft_threshold_reached, SOFT_THRESHOLD_REACHED_REPORTED) ^ drivers/scsi/scsi_sysfs.c:1001:2: note: expanded from macro 'DECLARE_EVT' DECLARE_EVT_SHOW(name, Cap_name) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/scsi_sysfs.c:981:9: note: expanded from macro 'DECLARE_EVT_= SHOW' return snprintf(buf, 20, "%d\n", val); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1011:1: warning: Call to function 'snprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] DECLARE_EVT(mode_parameter_change_reported, MODE_PARAMETER_CHANGE_REPORT= ED) ^ drivers/scsi/scsi_sysfs.c:1001:2: note: expanded from macro 'DECLARE_EVT' DECLARE_EVT_SHOW(name, Cap_name) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/scsi_sysfs.c:981:9: note: expanded from macro 'DECLARE_EVT_= SHOW' return snprintf(buf, 20, "%d\n", val); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1011:1: note: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 DECLARE_EVT(mode_parameter_change_reported, MODE_PARAMETER_CHANGE_REPORT= ED) ^ drivers/scsi/scsi_sysfs.c:1001:2: note: expanded from macro 'DECLARE_EVT' DECLARE_EVT_SHOW(name, Cap_name) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/scsi_sysfs.c:981:9: note: expanded from macro 'DECLARE_EVT_= SHOW' return snprintf(buf, 20, "%d\n", val); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1012:1: warning: Call to function 'snprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] DECLARE_EVT(lun_change_reported, LUN_CHANGE_REPORTED) ^ drivers/scsi/scsi_sysfs.c:1001:2: note: expanded from macro 'DECLARE_EVT' DECLARE_EVT_SHOW(name, Cap_name) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/scsi_sysfs.c:981:9: note: expanded from macro 'DECLARE_EVT_= SHOW' return snprintf(buf, 20, "%d\n", val); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1012:1: note: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 DECLARE_EVT(lun_change_reported, LUN_CHANGE_REPORTED) ^ drivers/scsi/scsi_sysfs.c:1001:2: note: expanded from macro 'DECLARE_EVT' DECLARE_EVT_SHOW(name, Cap_name) \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/scsi/scsi_sysfs.c:981:9: note: expanded from macro 'DECLARE_EVT_= SHOW' return snprintf(buf, 20, "%d\n", val); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1038:1: warning: Call to function 'snprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdev_show_function(queue_depth, "%d\n"); ^ drivers/scsi/scsi_sysfs.c:596:9: note: expanded from macro 'sdev_show_fu= nction' return snprintf (buf, 20, format_string, sdev->field); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1038:1: note: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 sdev_show_function(queue_depth, "%d\n"); ^ drivers/scsi/scsi_sysfs.c:596:9: note: expanded from macro 'sdev_show_fu= nction' return snprintf (buf, 20, format_string, sdev->field); \ ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1193:9: warning: Call to function 'snprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(buf, 20, "%u\n", ^~~~~~~~ drivers/scsi/scsi_sysfs.c:1193:9: note: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 return snprintf(buf, 20, "%u\n", ^~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 54 warnings generated. >> drivers/media/dvb-frontends/dib7000p.c:112:2: warning: Call to function = 'memset' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memset_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(state->msg, 0, 2 * sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:112:2: note: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 memset(state->msg, 0, 2 * sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:144:2: warning: Call to function = 'memset' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memset_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&state->msg[0], 0, sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:144:2: note: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 memset(&state->msg[0], 0, sizeof(struct i2c_msg)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1670:2: warning: Call to function= 'memset' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memset_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&c->strength, 0, sizeof(c->strength)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1670:2: note: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 memset(&c->strength, 0, sizeof(c->strength)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1671:2: warning: Call to function= 'memset' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memset_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&c->cnr, 0, sizeof(c->cnr)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1671:2: note: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 memset(&c->cnr, 0, sizeof(c->cnr)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1672:2: warning: Call to function= 'memset' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memset_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&c->post_bit_error, 0, sizeof(c->post_bit_error)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1672:2: note: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 memset(&c->post_bit_error, 0, sizeof(c->post_bit_error)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1673:2: warning: Call to function= 'memset' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memset_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&c->post_bit_count, 0, sizeof(c->post_bit_count)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1673:2: note: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 memset(&c->post_bit_count, 0, sizeof(c->post_bit_count)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1674:2: warning: Call to function= 'memset' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memset_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&c->block_error, 0, sizeof(c->block_error)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:1674:2: note: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 memset(&c->block_error, 0, sizeof(c->block_error)); ^~~~~~ >> drivers/media/dvb-frontends/dib7000p.c:2745:2: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&st->cfg, cfg, sizeof(struct dib7000p_config)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:2745:2: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&st->cfg, cfg, sizeof(struct dib7000p_config)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:2759:2: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&st->demod.ops, &dib7000p_ops, sizeof(struct dvb_frontend= _ops)); ^~~~~~ drivers/media/dvb-frontends/dib7000p.c:2759:2: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&st->demod.ops, &dib7000p_ops, sizeof(struct dvb_frontend= _ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 36 warnings generated. drivers/rpmsg/virtio_rpmsg_bus.c:332:3: warning: Call to function 'strnc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'strncpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(nsm.name, rpdev->id.name, RPMSG_NAME_SIZE); ^~~~~~~ drivers/rpmsg/virtio_rpmsg_bus.c:332:3: note: Call to function 'strncpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'strncpy_s' in case of C11 strncpy(nsm.name, rpdev->id.name, RPMSG_NAME_SIZE); ^~~~~~~ drivers/rpmsg/virtio_rpmsg_bus.c:356:3: warning: Call to function 'strnc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'strncpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(nsm.name, rpdev->id.name, RPMSG_NAME_SIZE); ^~~~~~~ drivers/rpmsg/virtio_rpmsg_bus.c:356:3: note: Call to function 'strncpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'strncpy_s' in case of C11 strncpy(nsm.name, rpdev->id.name, RPMSG_NAME_SIZE); ^~~~~~~ drivers/rpmsg/virtio_rpmsg_bus.c:427:2: warning: Call to function 'strnc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'strncpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(rpdev->id.name, chinfo->name, RPMSG_NAME_SIZE); ^~~~~~~ drivers/rpmsg/virtio_rpmsg_bus.c:427:2: note: Call to function 'strncpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'strncpy_s' in case of C11 strncpy(rpdev->id.name, chinfo->name, RPMSG_NAME_SIZE); ^~~~~~~ drivers/rpmsg/virtio_rpmsg_bus.c:618:2: warning: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(msg->data, data, len); ^~~~~~ drivers/rpmsg/virtio_rpmsg_bus.c:618:2: note: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 memcpy(msg->data, data, len); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 65 warnings generated. drivers/nvme/target/loop.c:179:2: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&iod->cmd, 0, sizeof(iod->cmd)); ^~~~~~ drivers/nvme/target/loop.c:179:2: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(&iod->cmd, 0, sizeof(iod->cmd)); ^~~~~~ drivers/nvme/target/loop.c:353:2: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&ctrl->admin_tag_set, 0, sizeof(ctrl->admin_tag_set)); ^~~~~~ drivers/nvme/target/loop.c:353:2: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(&ctrl->admin_tag_set, 0, sizeof(ctrl->admin_tag_set)); ^~~~~~ drivers/nvme/target/loop.c:529:2: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&ctrl->tag_set, 0, sizeof(ctrl->tag_set)); ^~~~~~ drivers/nvme/target/loop.c:529:2: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(&ctrl->tag_set, 0, sizeof(ctrl->tag_set)); ^~~~~~ Suppressed 62 warnings (62 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 61 warnings generated. drivers/nvme/target/fc.c:522:12: warning: Use of memory after it is free= d [clang-analyzer-unix.Malloc] dev_info(tgtport->dev, ^ include/linux/dev_printk.h:150:46: note: expanded from macro 'dev_info' dev_printk_index_wrap(_dev_info, KERN_INFO, dev, dev_fmt(fmt), #= #__VA_ARGS__) ^~~ include/linux/dev_printk.h:110:11: note: expanded from macro 'dev_printk= _index_wrap' _p_func(dev, fmt, ##__VA_ARGS__); \ ^~~ drivers/nvme/target/fc.c:491:6: note: Assuming field 'ls_req' is non-null if (!tgtport->ops->ls_req || !assoc->hostport || ^~~~~~~~~~~~~~~~~~~~~ drivers/nvme/target/fc.c:491:6: note: Left side of '||' is false drivers/nvme/target/fc.c:491:31: note: Assuming field 'hostport' is non-= null if (!tgtport->ops->ls_req || !assoc->hostport || ^~~~~~~~~~~~~~~~ drivers/nvme/target/fc.c:491:6: note: Left side of '||' is false if (!tgtport->ops->ls_req || !assoc->hostport || ^ drivers/nvme/target/fc.c:492:6: note: Assuming field 'invalid' is 0 assoc->hostport->invalid) ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/nvme/target/fc.c:491:2: note: Taking false branch if (!tgtport->ops->ls_req || !assoc->hostport || ^ drivers/nvme/target/fc.c:498:6: note: Assuming 'lsop' is non-null if (!lsop) { ^~~~~ drivers/nvme/target/fc.c:498:2: note: Taking false branch if (!lsop) { ^ drivers/nvme/target/fc.c:508:6: note: Assuming field 'lsrqst_priv_sz' is= 0 if (tgtport->ops->lsrqst_priv_sz) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/nvme/target/fc.c:508:2: note: Taking false branch -- drivers/extcon/extcon-fsa9480.c:288:2: note: Taking false branch if (ret) { ^ drivers/extcon/extcon-fsa9480.c:294:2: note: Taking false branch if (IS_ERR(info->regmap)) { ^ drivers/extcon/extcon-fsa9480.c:316:6: note: Assuming 'ret' is 0 if (ret) { ^~~ drivers/extcon/extcon-fsa9480.c:316:2: note: Taking false branch if (ret) { ^ drivers/extcon/extcon-fsa9480.c:322:2: note: Calling 'fsa9480_detect_dev' fsa9480_detect_dev(info); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/extcon/extcon-fsa9480.c:227:6: note: Assuming 'val1' is >=3D 0 if (val1 < 0 || val2 < 0) { ^~~~~~~~ drivers/extcon/extcon-fsa9480.c:227:6: note: Left side of '||' is false drivers/extcon/extcon-fsa9480.c:227:18: note: Assuming 'val2' is >=3D 0 if (val1 < 0 || val2 < 0) { ^~~~~~~~ drivers/extcon/extcon-fsa9480.c:227:2: note: Taking false branch if (val1 < 0 || val2 < 0) { ^ drivers/extcon/extcon-fsa9480.c:233:2: note: Loop condition is false. E= xiting loop dev_info(usbsw->dev, "dev1: 0x%x, dev2: 0x%x\n", val1, val2); ^ include/linux/dev_printk.h:150:2: note: expanded from macro 'dev_info' dev_printk_index_wrap(_dev_info, KERN_INFO, dev, dev_fmt(fmt), #= #__VA_ARGS__) ^ include/linux/dev_printk.h:109:3: note: expanded from macro 'dev_printk_= index_wrap' dev_printk_index_emit(level, fmt); \ ^ include/linux/dev_printk.h:105:2: note: expanded from macro 'dev_printk_= index_emit' printk_index_subsys_emit("%s %s: ", level, fmt) ^ include/linux/printk.h:413:2: note: expanded from macro 'printk_index_su= bsys_emit' __printk_index_emit(fmt, level, subsys_fmt_prefix) ^ include/linux/printk.h:392:34: note: expanded from macro '__printk_index= _emit' #define __printk_index_emit(...) do {} while (0) ^ drivers/extcon/extcon-fsa9480.c:236:2: note: Calling 'fsa9480_handle_cha= nge' fsa9480_handle_change(usbsw, usbsw->cable & ~val, false); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/extcon/extcon-fsa9480.c:205:2: note: Loop condition is true. En= tering loop body while (mask) { ^ drivers/extcon/extcon-fsa9480.c:206:3: note: 'dev' initialized to 31 int dev =3D fls64(mask) - 1; ^~~~~~~ drivers/extcon/extcon-fsa9480.c:207:3: note: Assigned value is garbage o= r undefined u64 cables =3D cable_types[dev]; ^ ~~~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/iio/light/tsl2583.c:146:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(chip->als_settings.als_device_lux, tsl2583_default_lux, ^~~~~~ drivers/iio/light/tsl2583.c:146:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(chip->als_settings.als_device_lux, tsl2583_default_lux, ^~~~~~ drivers/iio/light/tsl2583.c:478:8: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D sprintf(buf, "%d\n", chip->als_settings.als_cal_target); ^~~~~~~ drivers/iio/light/tsl2583.c:478:8: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 ret =3D sprintf(buf, "%d\n", chip->als_settings.als_cal_target); ^~~~~~~ drivers/iio/light/tsl2583.c:536:13: warning: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] offset +=3D sprintf(buf + offset, "%u,%u,%u,", ^~~~~~~ drivers/iio/light/tsl2583.c:536:13: note: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 offset +=3D sprintf(buf + offset, "%u,%u,%u,", ^~~~~~~ drivers/iio/light/tsl2583.c:550:12: warning: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] offset +=3D sprintf(buf + offset, "\n"); ^~~~~~~ drivers/iio/light/tsl2583.c:550:12: note: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 offset +=3D sprintf(buf + offset, "\n"); ^~~~~~~ drivers/iio/light/tsl2583.c:589:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(chip->als_settings.als_device_lux, &value[1], ^~~~~~ drivers/iio/light/tsl2583.c:589:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(chip->als_settings.als_device_lux, &value[1], ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/media/dvb-frontends/s5h1411.c:880:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &s5h1411_ops, ^~~~~~ drivers/media/dvb-frontends/s5h1411.c:880:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &s5h1411_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/iio/pressure/dlhl60d.c:45:8: warning: Excessive padding in 'stru= ct dlh_state' (52 padding bytes, where 20 is optimal). = Optimal fields order: = rx_buf, = use_interrupt, = client, = info, = completion, = consider reordering the fields or adding explicit padding members [clang= -analyzer-optin.performance.Padding] struct dlh_state { ~~~~~~~^~~~~~~~~~~ drivers/iio/pressure/dlhl60d.c:45:8: note: Excessive padding in 'struct = dlh_state' (52 padding bytes, where 20 is optimal). Optimal fields order: r= x_buf, use_interrupt, client, info, completion, consider reordering the fie= lds or adding explicit padding members struct dlh_state { ~~~~~~~^~~~~~~~~~~ drivers/iio/pressure/dlhl60d.c:262:3: warning: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(tmp_buf + i, ^~~~~~ drivers/iio/pressure/dlhl60d.c:262:3: note: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 memcpy(tmp_buf + i, ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/iio/pressure/icp10100.c:264:15: warning: 1st function call argum= ent is an uninitialized value [clang-analyzer-core.CallAndMessage] *pressure =3D (be16_to_cpu(measures[0]) << 8) | ^ include/linux/byteorder/generic.h:97:21: note: expanded from macro 'be16= _to_cpu' #define be16_to_cpu __be16_to_cpu ^ include/uapi/linux/byteorder/little_endian.h:43:26: note: expanded from = macro '__be16_to_cpu' #define __be16_to_cpu(x) __swab16((__force __u16)(__be16)(x)) ^ include/uapi/linux/swab.h:102:28: note: expanded from macro '__swab16' #define __swab16(x) (__u16)__builtin_bswap16((__u16)(x)) ^ drivers/iio/pressure/icp10100.c:383:2: note: Control jumps to 'case IIO_= CHAN_INFO_PROCESSED:' @line 385 switch (mask) { ^ drivers/iio/pressure/icp10100.c:386:10: note: Calling 'icp10100_read_raw= _measures' return icp10100_read_raw_measures(indio_dev, chan, val, = val2); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~ drivers/iio/pressure/icp10100.c:347:6: note: Assuming 'ret' is 0 if (ret) ^~~ drivers/iio/pressure/icp10100.c:347:2: note: Taking false branch if (ret) ^ drivers/iio/pressure/icp10100.c:350:8: note: Calling 'icp10100_get_measu= res' ret =3D icp10100_get_measures(st, &raw_pressure, &raw_temp); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:254:6: note: 'ret' is >=3D 0 if (ret < 0) ^~~ drivers/iio/pressure/icp10100.c:254:2: note: Taking false branch if (ret < 0) ^ drivers/iio/pressure/icp10100.c:259:8: note: Calling 'icp10100_send_cmd' ret =3D icp10100_send_cmd(st, cmd, measures, sizeof(measures)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:145:6: note: Assuming the condition is f= alse if (size > sizeof(data)) ^~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:145:2: note: Taking false branch if (size > sizeof(data)) ^ drivers/iio/pressure/icp10100.c:148:6: note: Assuming field 'response_wo= rd_nb' is <=3D 0 if (cmd->response_word_nb > 0 && ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:148:32: note: Left side of '&&' is false if (cmd->response_word_nb > 0 && ^ drivers/iio/pressure/icp10100.c:152:2: note: Taking false branch dev_dbg(&st->client->dev, "sending cmd %#x\n", be16_to_cpu(cmd->= cmd)); ^ include/linux/dev_printk.h:162:2: note: expanded from macro 'dev_dbg' if (0) \ ^ drivers/iio/pressure/icp10100.c:154:11: note: Field 'response_word_nb' i= s <=3D 0 if (cmd->response_word_nb > 0 && cmd->wait_us =3D=3D 0) { ^ drivers/iio/pressure/icp10100.c:154:32: note: Left side of '&&' is false if (cmd->response_word_nb > 0 && cmd->wait_us =3D=3D 0) { ^ drivers/iio/pressure/icp10100.c:162:9: note: Calling 'icp10100_i2c_xfer' ret =3D icp10100_i2c_xfer(st->client->adapter, &msgs[0],= 1); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:111:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) ^~~~~~~ drivers/iio/pressure/icp10100.c:111:2: note: Taking false branch -- ^ include/linux/dev_printk.h:162:2: note: expanded from macro 'dev_dbg' if (0) \ ^ drivers/iio/pressure/icp10100.c:154:11: note: Field 'response_word_nb' i= s > 0 if (cmd->response_word_nb > 0 && cmd->wait_us =3D=3D 0) { ^ drivers/iio/pressure/icp10100.c:154:6: note: Left side of '&&' is true if (cmd->response_word_nb > 0 && cmd->wait_us =3D=3D 0) { ^ drivers/iio/pressure/icp10100.c:154:35: note: Assuming field 'wait_us' i= s equal to 0 if (cmd->response_word_nb > 0 && cmd->wait_us =3D=3D 0) { ^~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:154:2: note: Taking true branch if (cmd->response_word_nb > 0 && cmd->wait_us =3D=3D 0) { ^ drivers/iio/pressure/icp10100.c:156:9: note: Calling 'icp10100_i2c_xfer' ret =3D icp10100_i2c_xfer(st->client->adapter, msgs, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:111:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) ^~~~~~~ drivers/iio/pressure/icp10100.c:111:2: note: Taking false branch if (ret < 0) ^ drivers/iio/pressure/icp10100.c:114:6: note: Assuming 'ret' is equal to = 'num' if (ret !=3D num) ^~~~~~~~~~ drivers/iio/pressure/icp10100.c:114:2: note: Taking false branch if (ret !=3D num) ^ drivers/iio/pressure/icp10100.c:117:2: note: Returning zero, which parti= cipates in a condition later return 0; ^~~~~~~~ drivers/iio/pressure/icp10100.c:156:9: note: Returning from 'icp10100_i2= c_xfer' ret =3D icp10100_i2c_xfer(st->client->adapter, msgs, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:158:7: note: 'ret' is 0 if (ret) ^~~ drivers/iio/pressure/icp10100.c:158:3: note: Taking false branch if (ret) ^ drivers/iio/pressure/icp10100.c:178:14: note: Assuming 'i' is < field 'r= esponse_word_nb' for (i =3D 0; i < cmd->response_word_nb; ++i) { ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:178:2: note: Loop condition is true. En= tering loop body for (i =3D 0; i < cmd->response_word_nb; ++i) { ^ drivers/iio/pressure/icp10100.c:182:7: note: Assuming the condition is f= alse if (crc !=3D ptr[ICP10100_CRC8_WORD_LENGTH]) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:182:3: note: Taking false branch if (crc !=3D ptr[ICP10100_CRC8_WORD_LENGTH]) { ^ drivers/iio/pressure/icp10100.c:178:14: note: Assuming 'i' is < field 'r= esponse_word_nb' for (i =3D 0; i < cmd->response_word_nb; ++i) { ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:178:2: note: Loop condition is true. En= tering loop body for (i =3D 0; i < cmd->response_word_nb; ++i) { ^ drivers/iio/pressure/icp10100.c:182:7: note: Assuming the condition is f= alse if (crc !=3D ptr[ICP10100_CRC8_WORD_LENGTH]) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:182:3: note: Taking false branch if (crc !=3D ptr[ICP10100_CRC8_WORD_LENGTH]) { ^ drivers/iio/pressure/icp10100.c:178:14: note: Assuming 'i' is >=3D field= 'response_word_nb' for (i =3D 0; i < cmd->response_word_nb; ++i) { ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:178:2: note: Loop condition is false. Ex= ecution continues on line 191 for (i =3D 0; i < cmd->response_word_nb; ++i) { ^ drivers/iio/pressure/icp10100.c:191:2: note: Returning zero, which parti= cipates in a condition later return 0; ^~~~~~~~ drivers/iio/pressure/icp10100.c:259:8: note: Returning from 'icp10100_se= nd_cmd' ret =3D icp10100_send_cmd(st, cmd, measures, sizeof(measures)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/pressure/icp10100.c:261:6: note: 'ret' is 0 if (ret) ^~~ drivers/iio/pressure/icp10100.c:261:2: note: Taking false branch if (ret) ^ drivers/iio/pressure/icp10100.c:266:17: note: 1st function call argument= is an uninitialized value *temperature =3D be16_to_cpu(measures[2]); ^ include/linux/byteorder/generic.h:97:21: note: expanded from macro 'be16= _to_cpu' #define be16_to_cpu __be16_to_cpu ^ include/uapi/linux/byteorder/little_endian.h:43:26: note: expanded from = macro '__be16_to_cpu' #define __be16_to_cpu(x) __swab16((__force __u16)(__be16)(x)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/uapi/linux/swab.h:102:28: note: expanded from macro '__swab16' #define __swab16(x) (__u16)__builtin_bswap16((__u16)(x)) ^ ~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. >> drivers/media/radio/si470x/radio-si470x-i2c.c:306:3: warning: Call to fu= nction 'memcpy' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'memcpy_s' in case of C11 [= clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&radio->buffer[radio->wr_index], &tmpbuf, 3); ^~~~~~ drivers/media/radio/si470x/radio-si470x-i2c.c:306:3: note: Call to funct= ion 'memcpy' is insecure as it does not provide security checks introduced = in the C11 standard. Replace with analogous functions that support length a= rguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&radio->buffer[radio->wr_index], &tmpbuf, 3); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 53 warnings generated. >> drivers/media/radio/radio-wl1273.c:194:3: warning: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&radio->buffer[radio->wr_index], &rds, RDS_BLOCK_= SIZE); ^~~~~~ drivers/media/radio/radio-wl1273.c:194:3: note: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&radio->buffer[radio->wr_index], &rds, RDS_BLOCK_= SIZE); ^~~~~~ drivers/media/radio/radio-wl1273.c:1292:24: warning: Value stored to 'ra= dio' during its initialization is never read [clang-analyzer-deadcode.DeadS= tores] struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1292:24: note: Value stored to 'radio= ' during its initialization is never read struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1304:24: warning: Value stored to 'ra= dio' during its initialization is never read [clang-analyzer-deadcode.DeadS= tores] struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1304:24: note: Value stored to 'radio= ' during its initialization is never read struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1467:24: warning: Value stored to 'ra= dio' during its initialization is never read [clang-analyzer-deadcode.DeadS= tores] struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1467:24: note: Value stored to 'radio= ' during its initialization is never read struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1483:24: warning: Value stored to 'ra= dio' during its initialization is never read [clang-analyzer-deadcode.DeadS= tores] struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1483:24: note: Value stored to 'radio= ' during its initialization is never read struct wl1273_device *radio =3D video_get_drvdata(video_devdata(= file)); ^~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~ drivers/media/radio/radio-wl1273.c:1739:3: warning: Value stored to 'r' = is never read [clang-analyzer-deadcode.DeadStores] r =3D wl1273_fm_set_rds(radio, WL1273_RDS_ON); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/radio/radio-wl1273.c:1739:3: note: Value stored to 'r' is = never read r =3D wl1273_fm_set_rds(radio, WL1273_RDS_ON); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/radio/radio-wl1273.c:1741:3: warning: Value stored to 'r' = is never read [clang-analyzer-deadcode.DeadStores] r =3D wl1273_fm_set_rds(radio, WL1273_RDS_OFF); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/radio/radio-wl1273.c:1741:3: note: Value stored to 'r' is = never read r =3D wl1273_fm_set_rds(radio, WL1273_RDS_OFF); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 18 warnings generated. drivers/firmware/google/coreboot_table.c:104:3: warning: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&device->entry, ptr_entry, entry->size); ^~~~~~ drivers/firmware/google/coreboot_table.c:104:3: note: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&device->entry, ptr_entry, entry->size); ^~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/firmware/google/framebuffer-coreboot.c:54:2: warning: Call to fu= nction 'memset' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'memset_s' in case of C11 [= clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&res, 0, sizeof(res)); ^~~~~~ drivers/firmware/google/framebuffer-coreboot.c:54:2: note: Call to funct= ion 'memset' is insecure as it does not provide security checks introduced = in the C11 standard. Replace with analogous functions that support length a= rguments or provides boundary checks such as 'memset_s' in case of C11 memset(&res, 0, sizeof(res)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 26 warnings generated. drivers/most/configfs.c:162:9: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(page, PAGE_SIZE, "%s\n", to_mdev_link(item)->dir= ection); ^~~~~~~~ drivers/most/configfs.c:162:9: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 return snprintf(page, PAGE_SIZE, "%s\n", to_mdev_link(item)->dir= ection); ^~~~~~~~ drivers/most/configfs.c:173:2: warning: Call to function 'strcpy' is ins= ecure as it does not provide bounding of the memory buffer. Replace unbound= ed copy functions with analogous functions that support length arguments su= ch as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(mdev_link->direction, page); ^~~~~~ drivers/most/configfs.c:173:2: note: Call to function 'strcpy' is insecu= re as it does not provide bounding of the memory buffer. Replace unbounded = copy functions with analogous functions that support length arguments such = as 'strlcpy'. CWE-119 strcpy(mdev_link->direction, page); ^~~~~~ drivers/most/configfs.c:180:9: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(page, PAGE_SIZE, "%s\n", to_mdev_link(item)->dat= atype); ^~~~~~~~ drivers/most/configfs.c:180:9: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 return snprintf(page, PAGE_SIZE, "%s\n", to_mdev_link(item)->dat= atype); ^~~~~~~~ drivers/most/configfs.c:192:2: warning: Call to function 'strcpy' is ins= ecure as it does not provide bounding of the memory buffer. Replace unbound= ed copy functions with analogous functions that support length arguments su= ch as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(mdev_link->datatype, page); ^~~~~~ drivers/most/configfs.c:192:2: note: Call to function 'strcpy' is insecu= re as it does not provide bounding of the memory buffer. Replace unbounded = copy functions with analogous functions that support length arguments such = as 'strlcpy'. CWE-119 strcpy(mdev_link->datatype, page); ^~~~~~ drivers/most/configfs.c:199:9: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return snprintf(page, PAGE_SIZE, "%s\n", to_mdev_link(item)->dev= ice); ^~~~~~~~ drivers/most/configfs.c:199:9: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 return snprintf(page, PAGE_SIZE, "%s\n", to_mdev_link(item)->dev= ice); -- ^~~~~~~~~~~~~~~ include/linux/bitops.h:154:2: note: Taking true branch if (sizeof(l) =3D=3D 4) ^ include/linux/bitops.h:155:10: note: Calling 'fls' return fls(l); ^~~~~~ include/asm-generic/bitops/fls.h:15:2: note: 'r' initialized to 32 int r =3D 32; ^~~~~ include/asm-generic/bitops/fls.h:17:6: note: Assuming 'x' is not equal t= o 0, which participates in a condition later if (!x) ^~ include/asm-generic/bitops/fls.h:17:2: note: Taking false branch if (!x) ^ include/asm-generic/bitops/fls.h:19:6: note: Assuming the condition is f= alse if (!(x & 0xffff0000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:19:2: note: Taking false branch if (!(x & 0xffff0000u)) { ^ include/asm-generic/bitops/fls.h:23:6: note: Assuming the condition is f= alse if (!(x & 0xff000000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:23:2: note: Taking false branch if (!(x & 0xff000000u)) { ^ include/asm-generic/bitops/fls.h:27:6: note: Assuming the condition is f= alse if (!(x & 0xf0000000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:27:2: note: Taking false branch if (!(x & 0xf0000000u)) { ^ include/asm-generic/bitops/fls.h:31:6: note: Assuming the condition is f= alse if (!(x & 0xc0000000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:31:2: note: Taking false branch if (!(x & 0xc0000000u)) { ^ include/asm-generic/bitops/fls.h:35:6: note: Assuming the condition is f= alse if (!(x & 0x80000000u)) { ^~~~~~~~~~~~~~~~~~ include/asm-generic/bitops/fls.h:35:2: note: Taking false branch if (!(x & 0x80000000u)) { ^ include/asm-generic/bitops/fls.h:39:2: note: Returning the value 32 (loa= ded from 'r') return r; ^~~~~~~~ include/linux/bitops.h:155:10: note: Returning from 'fls' return fls(l); ^~~~~~ include/linux/bitops.h:155:3: note: Returning the value 32 return fls(l); ^~~~~~~~~~~~~ include/linux/log2.h:57:16: note: Returning from 'fls_long' return 1UL << fls_long(n - 1); ^~~~~~~~~~~~~~~ include/linux/log2.h:57:13: note: The result of the left shift is undefi= ned due to shifting by '32', which is greater or equal to the width of type= 'unsigned long' return 1UL << fls_long(n - 1); ^ ~~~~~~~~~~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. drivers/media/dvb-frontends/s5h1420.c:186:29: warning: The result of the= left shift is undefined because the left operand is negative [clang-analyz= er-core.UndefinedBinaryOperatorResult] ((cmd->msg_len-1) << 4) | 0x08); ~~~~~~~~~~~~~~~~ ^ drivers/media/dvb-frontends/s5h1420.c:170:2: note: Assuming 'debug' is 0 dprintk("enter %s\n", __func__); ^ drivers/media/dvb-frontends/s5h1420.c:61:6: note: expanded from macro 'd= printk' if (debug) \ ^~~~~ drivers/media/dvb-frontends/s5h1420.c:170:2: note: Taking false branch dprintk("enter %s\n", __func__); ^ drivers/media/dvb-frontends/s5h1420.c:61:2: note: expanded from macro 'd= printk' if (debug) \ ^ drivers/media/dvb-frontends/s5h1420.c:170:2: note: Loop condition is fal= se. Exiting loop dprintk("enter %s\n", __func__); ^ drivers/media/dvb-frontends/s5h1420.c:60:23: note: expanded from macro '= dprintk' #define dprintk(x...) do { \ ^ drivers/media/dvb-frontends/s5h1420.c:171:6: note: Assuming the conditio= n is false if (cmd->msg_len > sizeof(cmd->msg)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/s5h1420.c:171:2: note: Taking false branch if (cmd->msg_len > sizeof(cmd->msg)) ^ drivers/media/dvb-frontends/s5h1420.c:180:11: note: Assuming 'i' is >=3D= field 'msg_len' for(i=3D0; i< cmd->msg_len; i++) { ^~~~~~~~~~~~~~~ drivers/media/dvb-frontends/s5h1420.c:180:2: note: Loop condition is fal= se. Execution continues on line 185 for(i=3D0; i< cmd->msg_len; i++) { ^ drivers/media/dvb-frontends/s5h1420.c:186:29: note: The result of the le= ft shift is undefined because the left operand is negative ((cmd->msg_len-1) << 4) | 0x08); ~~~~~~~~~~~~~~~~ ^ >> drivers/media/dvb-frontends/s5h1420.c:846:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(m, 0, sizeof(struct i2c_msg) * (1 + num)); ^~~~~~ drivers/media/dvb-frontends/s5h1420.c:846:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(m, 0, sizeof(struct i2c_msg) * (1 + num)); ^~~~~~ >> drivers/media/dvb-frontends/s5h1420.c:852:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&m[1], msg, sizeof(struct i2c_msg) * num); ^~~~~~ drivers/media/dvb-frontends/s5h1420.c:852:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&m[1], msg, sizeof(struct i2c_msg) * num); ^~~~~~ drivers/media/dvb-frontends/s5h1420.c:895:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(state->shadow, 0xff, sizeof(state->shadow)); ^~~~~~ drivers/media/dvb-frontends/s5h1420.c:895:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(state->shadow, 0xff, sizeof(state->shadow)); ^~~~~~ drivers/media/dvb-frontends/s5h1420.c:901:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &s5h1420_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ drivers/media/dvb-frontends/s5h1420.c:901:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &s5h1420_ops, sizeof(struct dvb_fro= ntend_ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 20 warnings generated. drivers/mux/mmio.c:93:15: warning: 1st function call argument is an unin= itialized value [clang-analyzer-core.CallAndMessage] field.msb =3D fls(mask) - 1; ^ ~~~~ drivers/mux/mmio.c:47:6: note: Assuming the condition is true if (of_device_is_compatible(np, "mmio-mux")) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mux/mmio.c:47:2: note: Taking true branch if (of_device_is_compatible(np, "mmio-mux")) ^ drivers/mux/mmio.c:51:6: note: Calling 'IS_ERR' if (IS_ERR(regmap)) { ^~~~~~~~~~~~~~ include/linux/err.h:36:9: note: Assuming the condition is false return IS_ERR_VALUE((unsigned long)ptr); ^ include/linux/err.h:22:34: note: expanded from macro 'IS_ERR_VALUE' #define IS_ERR_VALUE(x) unlikely((unsigned long)(void *)(x) >=3D (unsign= ed long)-MAX_ERRNO) ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~~~~~~ include/linux/compiler.h:78:42: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^ include/linux/err.h:36:2: note: Returning zero, which participates in a = condition later return IS_ERR_VALUE((unsigned long)ptr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mux/mmio.c:51:6: note: Returning from 'IS_ERR' if (IS_ERR(regmap)) { ^~~~~~~~~~~~~~ drivers/mux/mmio.c:51:2: note: Taking false branch if (IS_ERR(regmap)) { ^ drivers/mux/mmio.c:58:6: note: Assuming 'ret' is not equal to 0 if (ret =3D=3D 0 || ret % 2) ^~~~~~~~ drivers/mux/mmio.c:58:6: note: Left side of '||' is false drivers/mux/mmio.c:58:18: note: Assuming the condition is false if (ret =3D=3D 0 || ret % 2) ^~~~~~~ drivers/mux/mmio.c:58:2: note: Taking false branch if (ret =3D=3D 0 || ret % 2) ^ drivers/mux/mmio.c:60:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) { ^~~~~~~ drivers/mux/mmio.c:60:2: note: Taking false branch if (ret < 0) { ^ drivers/mux/mmio.c:69:6: note: Calling 'IS_ERR' if (IS_ERR(mux_chip)) ^~~~~~~~~~~~~~~~ include/linux/err.h:36:9: note: Assuming the condition is false return IS_ERR_VALUE((unsigned long)ptr); ^ include/linux/err.h:22:34: note: expanded from macro 'IS_ERR_VALUE' #define IS_ERR_VALUE(x) unlikely((unsigned long)(void *)(x) >=3D (unsign= ed long)-MAX_ERRNO) ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~~~~~~ include/linux/compiler.h:78:42: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^ include/linux/err.h:36:2: note: Returning zero, which participates in a = condition later return IS_ERR_VALUE((unsigned long)ptr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mux/mmio.c:69:6: note: Returning from 'IS_ERR' if (IS_ERR(mux_chip)) ^~~~~~~~~~~~~~~~ drivers/mux/mmio.c:69:2: note: Taking false branch if (IS_ERR(mux_chip)) ^ drivers/mux/mmio.c:74:14: note: Assuming 'i' is < 'num_fields' for (i =3D 0; i < num_fields; i++) { ^~~~~~~~~~~~~~ drivers/mux/mmio.c:74:2: note: Loop condition is true. Entering loop bo= dy for (i =3D 0; i < num_fields; i++) { ^ drivers/mux/mmio.c:78:12: note: 'mask' declared without an initial value -- memcpy(&chip->settings, chip->pdata->platform_default_se= ttings, ^~~~~~ drivers/iio/light/tsl2772.c:630:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(&chip->settings, chip->pdata->platform_default_se= ttings, ^~~~~~ drivers/iio/light/tsl2772.c:633:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&chip->settings, &tsl2772_default_settings, ^~~~~~ drivers/iio/light/tsl2772.c:633:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(&chip->settings, &tsl2772_default_settings, ^~~~~~ drivers/iio/light/tsl2772.c:638:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(chip->tsl2772_device_lux, ^~~~~~ drivers/iio/light/tsl2772.c:638:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(chip->tsl2772_device_lux, ^~~~~~ drivers/iio/light/tsl2772.c:642:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(chip->tsl2772_device_lux, ^~~~~~ drivers/iio/light/tsl2772.c:642:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(chip->tsl2772_device_lux, ^~~~~~ drivers/iio/light/tsl2772.c:896:40: warning: The result of the left shif= t is undefined because the left operand is negative [clang-analyzer-core.Un= definedBinaryOperatorResult] chip->settings.prox_thres_high =3D (max << 1) - mean; ^ drivers/iio/light/tsl2772.c:1057:6: note: Assuming the condition is false if (kstrtobool(buf, &value) || !value) ^~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/light/tsl2772.c:1057:6: note: Left side of '||' is false drivers/iio/light/tsl2772.c:1057:33: note: Assuming 'value' is true if (kstrtobool(buf, &value) || !value) ^~~~~~ drivers/iio/light/tsl2772.c:1057:2: note: Taking false branch if (kstrtobool(buf, &value) || !value) ^ drivers/iio/light/tsl2772.c:1060:8: note: Calling 'tsl2772_prox_cal' ret =3D tsl2772_prox_cal(indio_dev); ^~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/light/tsl2772.c:875:6: note: Assuming field 'prox_max_sample= s_cal' is >=3D 1 if (chip->settings.prox_max_samples_cal < 1 || ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/light/tsl2772.c:875:6: note: Left side of '||' is false drivers/iio/light/tsl2772.c:876:6: note: Assuming field 'prox_max_sample= s_cal' is <=3D MAX_SAMPLES_CAL chip->settings.prox_max_samples_cal > MAX_SAMPLES_CAL) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/light/tsl2772.c:875:2: note: Taking false branch if (chip->settings.prox_max_samples_cal < 1 || ^ drivers/iio/light/tsl2772.c:879:14: note: 'i' is < field 'prox_max_sampl= es_cal' for (i =3D 0; i < chip->settings.prox_max_samples_cal; i++) { ^ drivers/iio/light/tsl2772.c:879:2: note: Loop condition is true. Enteri= ng loop body for (i =3D 0; i < chip->settings.prox_max_samples_cal; i++) { ^ drivers/iio/light/tsl2772.c:882:7: note: 'ret' is >=3D 0 if (ret < 0) ^~~ drivers/iio/light/tsl2772.c:882:3: note: Taking false branch if (ret < 0) ^ drivers/iio/light/tsl2772.c:879:14: note: Assuming 'i' is >=3D field 'pr= ox_max_samples_cal' for (i =3D 0; i < chip->settings.prox_max_samples_cal; i++) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/light/tsl2772.c:879:2: note: Loop condition is false. Execut= ion continues on line 888 for (i =3D 0; i < chip->settings.prox_max_samples_cal; i++) { ^ drivers/iio/light/tsl2772.c:889:2: note: The value -2147483648 is assign= ed to 'max' max =3D INT_MIN; ^~~~~~~~~~~~~ drivers/iio/light/tsl2772.c:890:14: note: Assuming 'i' is >=3D field 'pr= ox_max_samples_cal' for (i =3D 0; i < chip->settings.prox_max_samples_cal; i++) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/light/tsl2772.c:890:2: note: Loop condition is false. Execut= ion continues on line 894 for (i =3D 0; i < chip->settings.prox_max_samples_cal; i++) { ^ drivers/iio/light/tsl2772.c:896:40: note: The result of the left shift i= s undefined because the left operand is negative chip->settings.prox_thres_high =3D (max << 1) - mean; ~~~ ^ drivers/iio/light/tsl2772.c:1039:2: warning: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(chip->tsl2772_device_lux, 0, sizeof(chip->tsl2772_device_= lux)); ^~~~~~ drivers/iio/light/tsl2772.c:1039:2: note: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 memset(chip->tsl2772_device_lux, 0, sizeof(chip->tsl2772_device_= lux)); ^~~~~~ drivers/iio/light/tsl2772.c:1040:2: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(chip->tsl2772_device_lux, &value[1], (value[0] * 4)); ^~~~~~ drivers/iio/light/tsl2772.c:1040:2: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(chip->tsl2772_device_lux, &value[1], (value[0] * 4)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/dvb-frontends/si2165.c:528:34: warning: Value stored to 'c= ' during its initialization is never read [clang-analyzer-deadcode.DeadStor= es] struct dtv_frontend_properties *c =3D &fe->dtv_property_cache; ^ ~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/si2165.c:528:34: note: Value stored to 'c' d= uring its initialization is never read struct dtv_frontend_properties *c =3D &fe->dtv_property_cache; ^ ~~~~~~~~~~~~~~~~~~~~~~~ >> drivers/media/dvb-frontends/si2165.c:1193:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->fe.ops, &si2165_ops, ^~~~~~ drivers/media/dvb-frontends/si2165.c:1193:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->fe.ops, &si2165_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/dvb-frontends/sp2.c:73:2: warning: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buffer[1], buf, len); ^~~~~~ drivers/media/dvb-frontends/sp2.c:73:2: note: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&buffer[1], buf, len); ^~~~~~ drivers/media/dvb-frontends/sp2.c:208:14: warning: Value stored to 's' d= uring its initialization is never read [clang-analyzer-deadcode.DeadStores] struct sp2 *s =3D en50221->data; ^ ~~~~~~~~~~~~~ drivers/media/dvb-frontends/sp2.c:208:14: note: Value stored to 's' duri= ng its initialization is never read struct sp2 *s =3D en50221->data; ^ ~~~~~~~~~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 57 warnings generated. drivers/media/dvb-frontends/tda10071.c:42:21: warning: Value stored to '= client' during its initialization is never read [clang-analyzer-deadcode.De= adStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:42:21: note: Value stored to 'cli= ent' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:92:21: warning: Value stored to '= client' during its initialization is never read [clang-analyzer-deadcode.De= adStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:92:21: note: Value stored to 'cli= ent' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:137:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:137:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:183:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:183:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ >> drivers/media/dvb-frontends/tda10071.c:227:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&cmd.args[7], diseqc_cmd->msg, diseqc_cmd->msg_len); ^~~~~~ drivers/media/dvb-frontends/tda10071.c:227:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&cmd.args[7], diseqc_cmd->msg, diseqc_cmd->msg_len); ^~~~~~ drivers/media/dvb-frontends/tda10071.c:243:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:243:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:303:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:303:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:366:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:366:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:550:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:550:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:696:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:696:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:1041:21: warning: Value stored to= 'client' during its initialization is never read [clang-analyzer-deadcode.= DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:1041:21: note: Value stored to 'c= lient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/tda10071.c:1208:2: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->fe.ops, &tda10071_ops, sizeof(struct dvb_frontend_o= ps)); ^~~~~~ drivers/media/dvb-frontends/tda10071.c:1208:2: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dev->fe.ops, &tda10071_ops, sizeof(struct dvb_frontend_o= ps)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 52 warnings generated. drivers/mtd/mtdcore.c:660:3: warning: Value stored to 'error' is never r= ead [clang-analyzer-deadcode.DeadStores] error =3D 0; ^ ~ drivers/mtd/mtdcore.c:660:3: note: Value stored to 'error' is never read error =3D 0; ^ ~ drivers/mtd/mtdcore.c:751:3: warning: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&mtd->dev, 0, sizeof(mtd->dev)); ^~~~~~ drivers/mtd/mtdcore.c:751:3: note: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 memset(&mtd->dev, 0, sizeof(mtd->dev)); ^~~~~~ drivers/mtd/mtdcore.c:1026:3: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&master->reboot_notifier, 0, sizeof(master->reboo= t_notifier)); ^~~~~~ drivers/mtd/mtdcore.c:1026:3: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 memset(&master->reboot_notifier, 0, sizeof(master->reboo= t_notifier)); ^~~~~~ drivers/mtd/mtdcore.c:1648:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(oobecc, 0, sizeof(*oobecc)); ^~~~~~ drivers/mtd/mtdcore.c:1648:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 memset(oobecc, 0, sizeof(*oobecc)); ^~~~~~ drivers/mtd/mtdcore.c:1682:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(oobfree, 0, sizeof(*oobfree)); ^~~~~~ drivers/mtd/mtdcore.c:1682:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 memset(oobfree, 0, sizeof(*oobfree)); ^~~~~~ drivers/mtd/mtdcore.c:1719:2: warning: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(oobregion, 0, sizeof(*oobregion)); ^~~~~~ drivers/mtd/mtdcore.c:1719:2: note: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 memset(oobregion, 0, sizeof(*oobregion)); ^~~~~~ drivers/mtd/mtdcore.c:1796:3: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, oobbuf + oobregion.offset, cnt); ^~~~~~ drivers/mtd/mtdcore.c:1796:3: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(buf, oobbuf + oobregion.offset, cnt); ^~~~~~ drivers/mtd/mtdcore.c:1839:3: warning: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(oobbuf + oobregion.offset, buf, cnt); ^~~~~~ drivers/mtd/mtdcore.c:1839:3: note: Call to function 'memcpy' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memcpy_s' in case of C11 memcpy(oobbuf + oobregion.offset, buf, cnt); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. >> drivers/media/i2c/mt9t112.c:176:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&ret, buf, 2); ^~~~~~ drivers/media/i2c/mt9t112.c:176:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(&ret, buf, 2); ^~~~~~ drivers/media/i2c/mt9t112.c:191:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf + 0, &command, 2); ^~~~~~ drivers/media/i2c/mt9t112.c:191:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(buf + 0, &command, 2); ^~~~~~ drivers/media/i2c/mt9t112.c:192:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf + 2, &data, 2); ^~~~~~ drivers/media/i2c/mt9t112.c:192:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(buf + 2, &data, 2); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/i2c/mt9v111.c:492:13: warning: Although the value stored t= o 'vb' is used in the enclosing expression, the value is never actually rea= d from 'vb' [clang-analyzer-deadcode.DeadStores] best_fps =3D vb =3D hb =3D 0; ^ ~~~~~~ drivers/media/i2c/mt9v111.c:492:13: note: Although the value stored to '= vb' is used in the enclosing expression, the value is never actually read f= rom 'vb' best_fps =3D vb =3D hb =3D 0; ^ ~~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 24 warnings generated. drivers/ipack/ipack.c:128:3: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(&buf[c], "%02x", idev->id[i]); ^~~~~~~ drivers/ipack/ipack.c:128:3: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 sprintf(&buf[c], "%02x", idev->id[i]); ^~~~~~~ drivers/ipack/ipack.c:141:10: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "0x%02x\n", idev->id_vendor); ^~~~~~~ drivers/ipack/ipack.c:141:10: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "0x%02x\n", idev->id_vendor); ^~~~~~~ drivers/ipack/ipack.c:143:10: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "0x%06x\n", idev->id_vendor); ^~~~~~~ drivers/ipack/ipack.c:143:10: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "0x%06x\n", idev->id_vendor); ^~~~~~~ drivers/ipack/ipack.c:155:10: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "0x%02x\n", idev->id_device); ^~~~~~~ drivers/ipack/ipack.c:155:10: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "0x%02x\n", idev->id_device); ^~~~~~~ drivers/ipack/ipack.c:157:10: warning: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "0x%04x\n", idev->id_device); ^~~~~~~ drivers/ipack/ipack.c:157:10: note: Call to function 'sprintf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "0x%04x\n", idev->id_device); ^~~~~~~ drivers/ipack/ipack.c:168:9: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "ipac:f%02Xv%08Xd%08X", idev->id_format, ^~~~~~~ drivers/ipack/ipack.c:168:9: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "ipac:f%02Xv%08Xd%08X", idev->id_format, ^~~~~~~ drivers/ipack/ipack.c:172:1: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] ipack_device_attr(id_format, "0x%hhx\n"); ^ drivers/ipack/ipack.c:102:9: note: expanded from macro 'ipack_device_att= r' return sprintf(buf, format_string, idev->field); \ ^~~~~~~ drivers/ipack/ipack.c:172:1: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 ipack_device_attr(id_format, "0x%hhx\n"); ^ drivers/ipack/ipack.c:102:9: note: expanded from macro 'ipack_device_att= r' return sprintf(buf, format_string, idev->field); \ ^~~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 51 warnings generated. drivers/media/v4l2-core/v4l2-dev.c:51:9: warning: Call to function 'spri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'sprintf_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%i\n", vdev->index); ^~~~~~~ drivers/media/v4l2-core/v4l2-dev.c:51:9: note: Call to function 'sprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%i\n", vdev->index); -- ^~~~~~ drivers/hid/hid-steam.c:154:3: note: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 memcpy(data, buf + 1, min(size, ret - 1)); ^~~~~~ drivers/hid/hid-steam.c:176:2: warning: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf + 1, cmd, size); ^~~~~~ drivers/hid/hid-steam.c:176:2: note: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 memcpy(buf + 1, cmd, size); ^~~~~~ drivers/hid/hid-steam.c:246:15: warning: The left operand of '!=3D' is a= garbage value [clang-analyzer-core.UndefinedBinaryOperatorResult] if (reply[0] !=3D 0xae || reply[1] !=3D 0x15 || reply[2] !=3D 0x= 01) ^ drivers/hid/hid-steam.c:570:2: note: Loop condition is false. Exiting l= oop spin_lock_irqsave(&steam->lock, flags); ^ include/linux/spinlock.h:379:2: note: expanded from macro 'spin_lock_irq= save' raw_spin_lock_irqsave(spinlock_check(lock), flags); \ ^ include/linux/spinlock.h:240:2: note: expanded from macro 'raw_spin_lock= _irqsave' do { \ ^ drivers/hid/hid-steam.c:570:2: note: Loop condition is false. Exiting l= oop spin_lock_irqsave(&steam->lock, flags); ^ include/linux/spinlock.h:377:43: note: expanded from macro 'spin_lock_ir= qsave' #define spin_lock_irqsave(lock, flags) \ ^ drivers/hid/hid-steam.c:574:6: note: Assuming 'connected' is true if (connected) { ^~~~~~~~~ drivers/hid/hid-steam.c:574:2: note: Taking true branch if (connected) { ^ drivers/hid/hid-steam.c:575:9: note: Calling 'steam_register' ret =3D steam_register(steam); ^~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-steam.c:510:6: note: Assuming the condition is true if (!steam->serial_no[0]) { ^~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-steam.c:510:2: note: Taking true branch if (!steam->serial_no[0]) { ^ drivers/hid/hid-steam.c:516:7: note: Calling 'steam_get_serial' if (steam_get_serial(steam) < 0) ^~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-steam.c:241:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) ^~~~~~~ drivers/hid/hid-steam.c:241:2: note: Taking false branch if (ret < 0) ^ drivers/hid/hid-steam.c:243:8: note: Calling 'steam_recv_report' ret =3D steam_recv_report(steam, reply, sizeof(reply)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-steam.c:137:6: note: Assuming the condition is false if (hid_report_len(r) < 64) ^~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-steam.c:137:2: note: Taking false branch if (hid_report_len(r) < 64) ^ drivers/hid/hid-steam.c:141:6: note: Assuming 'buf' is non-null if (!buf) ^~~~ drivers/hid/hid-steam.c:141:2: note: Taking false branch if (!buf) ^ drivers/hid/hid-steam.c:153:6: note: Assuming 'ret' is <=3D 0 if (ret > 0) ^~~~~~~ drivers/hid/hid-steam.c:153:2: note: Taking false branch if (ret > 0) ^ drivers/hid/hid-steam.c:156:2: note: Returning without writing to '*data' return ret; ^ drivers/hid/hid-steam.c:243:8: note: Returning from 'steam_recv_report' ret =3D steam_recv_report(steam, reply, sizeof(reply)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-steam.c:244:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) ^~~~~~~ drivers/hid/hid-steam.c:244:2: note: Taking false branch if (ret < 0) ^ drivers/hid/hid-steam.c:246:15: note: The left operand of '!=3D' is a ga= rbage value if (reply[0] !=3D 0xae || reply[1] !=3D 0x15 || reply[2] !=3D 0x= 01) ~~~~~~~~ ^ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 18 warnings generated. drivers/cpuidle/governors/menu.c:551:2: warning: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(data, 0, sizeof(struct menu_device)); ^~~~~~ drivers/cpuidle/governors/menu.c:551:2: note: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 memset(data, 0, sizeof(struct menu_device)); ^~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 19 warnings generated. >> drivers/cpuidle/dt_idle_states.c:88:2: warning: Call to function 'strncp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'strncpy_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(idle_state->name, state_node->name, CPUIDLE_NAME_LEN - 1= ); ^~~~~~~ drivers/cpuidle/dt_idle_states.c:88:2: note: Call to function 'strncpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'strncpy_s' in case of C11 strncpy(idle_state->name, state_node->name, CPUIDLE_NAME_LEN - 1= ); ^~~~~~~ drivers/cpuidle/dt_idle_states.c:89:2: warning: Call to function 'strncp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'strncpy_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(idle_state->desc, desc, CPUIDLE_DESC_LEN - 1); ^~~~~~~ drivers/cpuidle/dt_idle_states.c:89:2: note: Call to function 'strncpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'strncpy_s' in case of C11 strncpy(idle_state->desc, desc, CPUIDLE_DESC_LEN - 1); ^~~~~~~ Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 54 warnings generated. drivers/mmc/core/core.c:550:2: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cmd, 0, sizeof(cmd)); ^~~~~~ drivers/mmc/core/core.c:550:2: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(&cmd, 0, sizeof(cmd)); ^~~~~~ drivers/mmc/core/core.c:557:2: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cmd, 0, sizeof(cmd)); ^~~~~~ drivers/mmc/core/core.c:557:2: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(&cmd, 0, sizeof(cmd)); ^~~~~~ drivers/mmc/core/core.c:628:2: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd->resp, 0, sizeof(cmd->resp)); ^~~~~~ drivers/mmc/core/core.c:628:2: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(cmd->resp, 0, sizeof(cmd->resp)); ^~~~~~ drivers/mmc/core/core.c:1638:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cmd, 0, sizeof(struct mmc_command)); ^~~~~~ drivers/mmc/core/core.c:1638:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(&cmd, 0, sizeof(struct mmc_command)); ^~~~~~ drivers/mmc/core/core.c:1653:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cmd, 0, sizeof(struct mmc_command)); ^~~~~~ drivers/mmc/core/core.c:1653:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(&cmd, 0, sizeof(struct mmc_command)); ^~~~~~ drivers/mmc/core/core.c:1940:19: warning: Value stored to 'host' during = its initialization is never read [clang-analyzer-deadcode.DeadStores] struct mmc_host *host =3D card->host; ^~~~ ~~~~~~~~~~ drivers/mmc/core/core.c:1940:19: note: Value stored to 'host' during its= initialization is never read struct mmc_host *host =3D card->host; ^~~~ ~~~~~~~~~~ Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/iio/proximity/isl29501.c:295:9: warning: Call to function 'sprin= tf' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'sprintf_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%u\n", value); ^~~~~~~ drivers/iio/proximity/isl29501.c:295:9: note: Call to function 'sprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%u\n", value); ^~~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/iio/proximity/srf08.c:233:9: warning: Call to function 'sprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "[0.043 0.043 11.008]\n"); ^~~~~~~ drivers/iio/proximity/srf08.c:233:9: note: Call to function 'sprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "[0.043 0.043 11.008]\n"); ^~~~~~~ drivers/iio/proximity/srf08.c:245:9: warning: Call to function 'sprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d.%03d\n", data->range_mm / 1000, ^~~~~~~ drivers/iio/proximity/srf08.c:245:9: note: Call to function 'sprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d.%03d\n", data->range_mm / 1000, ^~~~~~~ drivers/iio/proximity/srf08.c:323:11: warning: Call to function 'sprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sprintf_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] len +=3D sprintf(buf + len, "%d ", ^~~~~~~ drivers/iio/proximity/srf08.c:323:11: note: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 len +=3D sprintf(buf + len, "%d ", -- drivers/hid/hid-input.c:2016:12: note: Field 'input_configured' is null if (drv->input_configured && ^ drivers/hid/hid-input.c:2016:29: note: Left side of '&&' is false if (drv->input_configured && ^ drivers/hid/hid-input.c:2020:7: note: Assuming the condition is false if (!hidinput_has_been_populated(hidinput)) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-input.c:2020:3: note: Taking false branch if (!hidinput_has_been_populated(hidinput)) { ^ drivers/hid/hid-input.c:2026:7: note: Assuming the condition is true if (input_register_device(hidinput->input)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-input.c:2026:3: note: Taking true branch if (input_register_device(hidinput->input)) ^ drivers/hid/hid-input.c:2027:4: note: Control jumps to line 2044 goto out_unwind; ^ drivers/hid/hid-input.c:2044:2: note: Calling 'hidinput_disconnect' hidinput_disconnect(hid); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/hid/hid-input.c:2056:2: note: Use of memory after it is freed list_for_each_entry_safe(hidinput, next, &hid->inputs, list) { ^ include/linux/list.h:726:7: note: expanded from macro 'list_for_each_ent= ry_safe' n =3D list_next_entry(pos, member); = \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:564:2: note: expanded from macro 'list_next_entry' list_entry((pos)->member.next, typeof(*(pos)), member) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:520:2: note: expanded from macro 'list_entry' container_of(ptr, type, member) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/container_of.h:18:25: note: expanded from macro 'container= _of' void *__mptr =3D (void *)(ptr); = \ ^~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/media/dvb-frontends/stv090x.c:728:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf[2], data, count); ^~~~~~ drivers/media/dvb-frontends/stv090x.c:728:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf[2], data, count); ^~~~~~ drivers/media/dvb-frontends/stv090x.c:2289:23: warning: The result of th= e '/' expression is undefined [clang-analyzer-core.UndefinedBinaryOperatorR= esult] steps_max =3D (car_max / inc) + 1; /* min steps =3D 3 */ ^ drivers/media/dvb-frontends/stv090x.c:2405:2: note: Calling 'stv090x_get= _loop_params' stv090x_get_loop_params(state, &inc, &timeout_step, &steps_max); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv090x.c:2251:6: note: Assuming 'car_max' i= s <=3D 16384 if (car_max > 0x4000) ^~~~~~~~~~~~~~~~ drivers/media/dvb-frontends/stv090x.c:2251:2: note: Taking false branch if (car_max > 0x4000) ^ drivers/media/dvb-frontends/stv090x.c:2260:2: note: Control jumps to 'ca= se STV090x_SEARCH_DVBS2:' at line 2267 switch (state->search_mode) { ^ drivers/media/dvb-frontends/stv090x.c:2270:3: note: Execution continues= on line 2278 break; ^ drivers/media/dvb-frontends/stv090x.c:2279:7: note: Assuming 'inc' is <= =3D 'car_max' if ((inc > car_max) || (inc < 0)) ^~~~~~~~~~~~~ drivers/media/dvb-frontends/stv090x.c:2279:6: note: Left side of '||' is= false if ((inc > car_max) || (inc < 0)) ^ drivers/media/dvb-frontends/stv090x.c:2279:26: note: Assuming 'inc' is >= =3D 0 if ((inc > car_max) || (inc < 0)) ^~~~~~~ drivers/media/dvb-frontends/stv090x.c:2279:2: note: Taking false branch if ((inc > car_max) || (inc < 0)) ^ drivers/media/dvb-frontends/stv090x.c:2283:6: note: Assuming 'srate' is = <=3D 0 if (srate > 0) ^~~~~~~~~ drivers/media/dvb-frontends/stv090x.c:2283:2: note: Taking false branch if (srate > 0) ^ drivers/media/dvb-frontends/stv090x.c:2286:7: note: 'timeout' is > 100 if ((timeout > 100) || (timeout < 0)) ^~~~~~~ drivers/media/dvb-frontends/stv090x.c:2286:22: note: Left side of '||' i= s true if ((timeout > 100) || (timeout < 0)) ^ drivers/media/dvb-frontends/stv090x.c:2289:23: note: The result of the '= /' expression is undefined steps_max =3D (car_max / inc) + 1; /* min steps =3D 3 */ ~~~~~~~~^~~~~ drivers/media/dvb-frontends/stv090x.c:2960:2: warning: Value stored to '= reg' is never read [clang-analyzer-deadcode.DeadStores] reg =3D STV090x_READ_DEMOD(state, TMGOBS); ^ drivers/media/dvb-frontends/stv090x.c:2960:2: note: Value stored to 'reg= ' is never read Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. >> drivers/pps/clients/pps-ldisc.c:51:2: warning: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(info.name, PPS_MAX_NAME_LEN, "%s%d", drv->driver_name, = index); ^~~~~~~~ drivers/pps/clients/pps-ldisc.c:51:2: note: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 snprintf(info.name, PPS_MAX_NAME_LEN, "%s%d", drv->driver_name, = index); ^~~~~~~~ drivers/pps/clients/pps-ldisc.c:52:2: warning: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(info.path, PPS_MAX_NAME_LEN, "/dev/%s%d", drv->name, in= dex); ^~~~~~~~ drivers/pps/clients/pps-ldisc.c:52:2: note: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 snprintf(info.path, PPS_MAX_NAME_LEN, "/dev/%s%d", drv->name, in= dex); ^~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/pps/clients/pps_parport.c:152:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&pps_client_cb, 0, sizeof(pps_client_cb)); ^~~~~~ drivers/pps/clients/pps_parport.c:152:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(&pps_client_cb, 0, sizeof(pps_client_cb)); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. sound/soc/codecs/pcm186x.c:268:19: warning: Value stored to 'format' dur= ing its initialization is never read [clang-analyzer-deadcode.DeadStores] snd_pcm_format_t format =3D params_format(params); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/pcm186x.c:268:19: note: Value stored to 'format' during= its initialization is never read snd_pcm_format_t format =3D params_format(params); ^~~~~~ ~~~~~~~~~~~~~~~~~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1807:10: warning: The resul= t of the left shift is undefined due to shifting '3' by '31', which is unre= presentable in the unsigned version of the return type 'int' [clang-analyze= r-core.UndefinedBinaryOperatorResult] data =3D ST_LSM6DSX_SHIFT_VAL(3, hub_settings->aux_sens.= mask); ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h:65:49: note: expanded from macro= 'ST_LSM6DSX_SHIFT_VAL' #define ST_LSM6DSX_SHIFT_VAL(val, mask) (((val) << __ffs(mask)) & (mask)) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2207:6: note: Assuming 'hw'= is non-null if (!hw) ^~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2207:2: note: Taking false = branch if (!hw) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2212:2: note: Loop conditio= n is false. Exiting loop mutex_init(&hw->fifo_lock); ^ include/linux/mutex.h:101:32: note: expanded from macro 'mutex_init' #define mutex_init(mutex) \ ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2213:2: note: Loop conditio= n is false. Exiting loop mutex_init(&hw->conf_lock); ^ include/linux/mutex.h:101:32: note: expanded from macro 'mutex_init' #define mutex_init(mutex) \ ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2214:2: note: Loop conditio= n is false. Exiting loop mutex_init(&hw->page_lock); ^ include/linux/mutex.h:101:32: note: expanded from macro 'mutex_init' #define mutex_init(mutex) \ ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2217:6: note: Assuming 'err= ' is 0 if (err) ^~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2217:2: note: Taking false = branch if (err) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2221:6: note: 'err' is 0 if (err) ^~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2221:2: note: Taking false = branch if (err) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2225:6: note: Assuming fiel= d 'buff' is non-null if (!hw->buff) ^~~~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2225:2: note: Taking false = branch if (!hw->buff) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2233:6: note: 'err' is >=3D= 0 if (err < 0) ^~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2233:2: note: Taking false = branch if (err < 0) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2236:2: note: Loop conditio= n is true. Entering loop body for (i =3D 0; i < ST_LSM6DSX_ID_EXT0; i++) { ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2238:3: note: Taking false = branch if (!hw->iio_devs[i]) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2236:2: note: Loop conditio= n is true. Entering loop body for (i =3D 0; i < ST_LSM6DSX_ID_EXT0; i++) { ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2238:3: note: Taking false = branch if (!hw->iio_devs[i]) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2236:2: note: Loop conditio= n is false. Execution continues on line 2242 for (i =3D 0; i < ST_LSM6DSX_ID_EXT0; i++) { ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:2242:8: note: Calling 'st_l= sm6dsx_init_device' err =3D st_lsm6dsx_init_device(hw); ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1926:6: note: 'err' is >=3D= 0 if (err < 0) ^~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1926:2: note: Taking false = branch if (err < 0) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1933:6: note: Assuming 'err= ' is >=3D 0 if (err < 0) ^~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1933:2: note: Taking false = branch if (err < 0) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1938:6: note: 'err' is >=3D= 0 if (err < 0) ^~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1938:2: note: Taking false = branch if (err < 0) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1943:6: note: Assuming 'err= ' is >=3D 0 if (err < 0) ^~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1943:2: note: Taking false = branch if (err < 0) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1947:6: note: Assuming fiel= d 'addr' is 0 if (hw->settings->irq_config.lir.addr) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1947:2: note: Taking false = branch if (hw->settings->irq_config.lir.addr) { ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1966:6: note: Assuming fiel= d 'addr' is 0 if (hw->settings->drdy_mask.addr) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1966:2: note: Taking false = branch if (hw->settings->drdy_mask.addr) { ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1974:8: note: Calling 'st_l= sm6dsx_init_shub' err =3D st_lsm6dsx_init_shub(hw); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1781:7: note: Assuming the = condition is false if ((dev_fwnode(dev) && device_property_read_bool(dev, "st,pullu= ps")) || ^~~~~~~~~~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1781:23: note: Left side of= '&&' is false if ((dev_fwnode(dev) && device_property_read_bool(dev, "st,pullu= ps")) || ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1782:7: note: Assuming 'pda= ta' is null (pdata && pdata->pullups)) { ^~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1782:13: note: Left side of= '&&' is false (pdata && pdata->pullups)) { ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1801:6: note: Assuming fiel= d 'addr' is not equal to 0 if (hub_settings->aux_sens.addr) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1801:2: note: Taking true b= ranch if (hub_settings->aux_sens.addr) { ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1804:7: note: Assuming 'err= ' is >=3D 0 if (err < 0) ^~~~~~~ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1804:3: note: Taking false = branch if (err < 0) ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c:1807:10: note: The result o= f the left shift is undefined due to shifting '3' by '31', which is unrepre= sentable in the unsigned version of the return type 'int' data =3D ST_LSM6DSX_SHIFT_VAL(3, hub_settings->aux_sens.= mask); ^ drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h:65:49: note: expanded from macro= 'ST_LSM6DSX_SHIFT_VAL' #define ST_LSM6DSX_SHIFT_VAL(val, mask) (((val) << __ffs(mask)) & (mask)) ~~~~~ ^ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/hwtracing/coresight/coresight-cti-core.c:447:2: warning: Value s= tored to 'reg_value' is never read [clang-analyzer-deadcode.DeadStores] reg_value =3D config->ctiappset; ^ ~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-core.c:447:2: note: Value stor= ed to 'reg_value' is never read reg_value =3D config->ctiappset; ^ ~~~~~~~~~~~~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 84 warnings generated. >> drivers/hwtracing/coresight/coresight-cti-sysfs.c:94:10: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", enabled); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:94:10: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", enabled); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:96:10: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", !!enable_req); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:96:10: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", !!enable_req); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:132:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", powered); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:132:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", powered); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:141:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", drvdata->ctidev.ctm_id); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:141:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", drvdata->ctidev.ctm_id); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:151:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", drvdata->ctidev.nr_trig_con); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:151:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", drvdata->ctidev.nr_trig_con); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:184:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(devaff0, CTIDEVAFF0); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:184:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(devaff0, CTIDEVAFF0); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:185:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(devaff1, CTIDEVAFF1); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:185:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(devaff1, CTIDEVAFF1); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:186:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(authstatus, CORESIGHT_AUTHSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:186:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(authstatus, CORESIGHT_AUTHSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:187:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(devarch, CORESIGHT_DEVARCH); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:187:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(devarch, CORESIGHT_DEVARCH); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:188:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(devid, CORESIGHT_DEVID); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:188:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(devid, CORESIGHT_DEVID); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:189:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(devtype, CORESIGHT_DEVTYPE); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:189:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(devtype, CORESIGHT_DEVTYPE); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ -- ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:193:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(pidr3, CORESIGHT_PERIPHIDR3); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:193:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(pidr3, CORESIGHT_PERIPHIDR3); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:194:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(pidr4, CORESIGHT_PERIPHIDR4); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:194:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(pidr4, CORESIGHT_PERIPHIDR4); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:235:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#x\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:235:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%#x\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:294:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:294:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:328:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:328:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:367:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:367:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:457:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(triginstatus, CTITRIGINSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:457:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(triginstatus, CTITRIGINSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:458:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(trigoutstatus, CTITRIGOUTSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:458:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(trigoutstatus, CTITRIGOUTSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:459:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(chinstatus, CTICHINSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:459:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(chinstatus, CTICHINSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:460:1: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] coresight_cti_reg(choutstatus, CTICHOUTSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:460:1: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 coresight_cti_reg(choutstatus, CTICHOUTSTATUS); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:179:9: note: expanded = from macro 'coresight_cti_reg' return sprintf(buf, "0x%x\n", val); \ ^~~~~~~ >> drivers/hwtracing/coresight/coresight-cti-sysfs.c:575:10: warning: Call = to function 'sscanf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sscanf_s' in case of = C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] items =3D sscanf(buf, "%d %d", &chan_idx, &trig_idx); ^~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:575:10: note: Call to = function 'sscanf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sscanf_s' in case of C11 items =3D sscanf(buf, "%d %d", &chan_idx, &trig_idx); ^~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:644:10: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] size =3D sprintf(buf, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:644:10: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 size =3D sprintf(buf, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:719:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:719:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:820:9: warning: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%ld\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:820:9: note: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%ld\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:836:12: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] used +=3D sprintf(buf + used, "%d ", reg_idx); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:836:12: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 used +=3D sprintf(buf + used, "%d ", reg_idx); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:839:10: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:839:10: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:856:12: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] used +=3D sprintf(buf + used, "%d ", reg_idx); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:856:12: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 used +=3D sprintf(buf + used, "%d ", reg_idx); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:859:10: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:859:10: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:890:10: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] size =3D sprintf(buf, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:890:10: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 size =3D sprintf(buf, "\n"); ^~~~~~~ >> drivers/hwtracing/coresight/coresight-cti-sysfs.c:949:9: warning: Call t= o function 'sprintf' is insecure as it does not provide bounding of the mem= ory buffer or security checks introduced in the C11 standard. Replace with = analogous functions that support length arguments or provides boundary chec= ks such as 'sprintf_s' in case of C11 [clang-analyzer-security.insecureAPI.= DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%s\n", con->con_dev_name); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:949:9: note: Call to f= unction 'sprintf' is insecure as it does not provide bounding of the memory= buffer or security checks introduced in the C11 standard. Replace with ana= logous functions that support length arguments or provides boundary checks = such as 'sprintf_s' in case of C11 return sprintf(buf, "%s\n", con->con_dev_name); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1004:11: warning: Call= to function 'sprintf' is insecure as it does not provide bounding of the m= emory buffer or security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'sprintf_s' in case of C11 [clang-analyzer-security.insecureAP= I.DeprecatedOrUnsafeBufferHandling] used +=3D sprintf(buf + used, "%s ", name); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1004:11: note: Call to= function 'sprintf' is insecure as it does not provide bounding of the memo= ry buffer or security checks introduced in the C11 standard. Replace with a= nalogous functions that support length arguments or provides boundary check= s such as 'sprintf_s' in case of C11 used +=3D sprintf(buf + used, "%s ", name); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1006:10: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1006:10: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1022:11: warning: Call= to function 'sprintf' is insecure as it does not provide bounding of the m= emory buffer or security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'sprintf_s' in case of C11 [clang-analyzer-security.insecureAP= I.DeprecatedOrUnsafeBufferHandling] used +=3D sprintf(buf + used, "%s ", name); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1022:11: note: Call to= function 'sprintf' is insecure as it does not provide bounding of the memo= ry buffer or security checks introduced in the C11 standard. Replace with a= nalogous functions that support length arguments or provides boundary check= s such as 'sprintf_s' in case of C11 used +=3D sprintf(buf + used, "%s ", name); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1024:10: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:1024:10: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 used +=3D sprintf(buf + used, "\n"); ^~~~~~~ drivers/hwtracing/coresight/coresight-cti.h:238:9: warning: Access to fi= eld 'hw_powered' results in a dereference of a null pointer (loaded from va= riable 'cfg') [clang-analyzer-core.NullDereference] return cfg->hw_powered && cfg->hw_enabled; ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:410:1: note: Calling '= cti_reg32_store' cti_config_reg32_rw(appset, ctiappset, CTIAPPSET); ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:281:9: note: expanded = from macro 'cti_config_reg32_rw' return cti_reg32_store(dev, buf, size, \ ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:247:2: note: 'drvdata'= initialized here struct cti_drvdata *drvdata =3D dev_get_drvdata(dev->parent); ^~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:248:2: note: 'config' = initialized here struct cti_config *config =3D &drvdata->config; ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:250:6: note: Calling '= kstrtoul' if (kstrtoul(buf, 0, &val)) ^~~~~~~~~~~~~~~~~~~~~~ include/linux/kstrtox.h:36:58: note: Left side of '&&' is false if (sizeof(unsigned long) =3D=3D sizeof(unsigned long long) && ^ include/linux/kstrtox.h:40:3: note: Returning value, which participates = in a condition later return _kstrtoul(s, base, res); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:250:6: note: Returning= from 'kstrtoul' if (kstrtoul(buf, 0, &val)) ^~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:250:6: note: Assuming = the condition is false if (kstrtoul(buf, 0, &val)) ^~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:250:2: note: Taking fa= lse branch if (kstrtoul(buf, 0, &val)) ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:255:6: note: Assuming = 'pcached_val' is null if (pcached_val) ^~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:255:6: note: Assuming = pointer value is null if (pcached_val) ^~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:255:2: note: Taking fa= lse branch if (pcached_val) ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:259:7: note: 'reg_offs= et' is >=3D 0 if ((reg_offset >=3D 0) && cti_active(config)) ^~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:259:6: note: Left side= of '&&' is true if ((reg_offset >=3D 0) && cti_active(config)) ^ drivers/hwtracing/coresight/coresight-cti-sysfs.c:259:38: note: Passing = value via 1st parameter 'cfg' if ((reg_offset >=3D 0) && cti_active(config)) ^~~~~~ drivers/hwtracing/coresight/coresight-cti-sysfs.c:259:27: note: Calling = 'cti_active' if ((reg_offset >=3D 0) && cti_active(config)) ^~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-cti.h:238:9: note: Access to field= 'hw_powered' results in a dereference of a null pointer (loaded from varia= ble 'cfg') return cfg->hw_powered && cfg->hw_enabled; ^~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. sound/pci/ac97/ac97_pcm.c:448:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(avail_slots, 0, sizeof(avail_slots)); ^~~~~~ sound/pci/ac97/ac97_pcm.c:448:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(avail_slots, 0, sizeof(avail_slots)); ^~~~~~ sound/pci/ac97/ac97_pcm.c:449:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(rate_table, 0, sizeof(rate_table)); ^~~~~~ sound/pci/ac97/ac97_pcm.c:449:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(rate_table, 0, sizeof(rate_table)); -- 45 warnings generated. drivers/hwmon/adt7411.c:172:25: warning: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return ret < 0 ? ret : sprintf(buf, "%u\n", !!(ret & attr2->nr)); ^~~~~~~ drivers/hwmon/adt7411.c:172:25: note: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 return ret < 0 ? ret : sprintf(buf, "%u\n", !!(ret & attr2->nr)); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 54 warnings generated. drivers/hwmon/adt7470.c:481:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->auto_update_interval); ^~~~~~~ drivers/hwmon/adt7470.c:481:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->auto_update_interval); ^~~~~~~ drivers/hwmon/adt7470.c:512:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->num_temp_sensors); ^~~~~~~ drivers/hwmon/adt7470.c:512:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->num_temp_sensors); ^~~~~~~ drivers/hwmon/adt7470.c:599:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%x\n", data->alarms_mask); ^~~~~~~ drivers/hwmon/adt7470.c:599:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%x\n", data->alarms_mask); ^~~~~~~ drivers/hwmon/adt7470.c:699:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->force_pwm_max); ^~~~~~~ drivers/hwmon/adt7470.c:699:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->force_pwm_max); ^~~~~~~ drivers/hwmon/adt7470.c:865:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->pwm_max[attr->index]); ^~~~~~~ drivers/hwmon/adt7470.c:865:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->pwm_max[attr->index]); ^~~~~~~ drivers/hwmon/adt7470.c:900:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", data->pwm_min[attr->index]); ^~~~~~~ drivers/hwmon/adt7470.c:900:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", data->pwm_min[attr->index]); ^~~~~~~ drivers/hwmon/adt7470.c:936:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", 1000 * (20 + data->pwm_tmin[attr->in= dex])); ^~~~~~~ drivers/hwmon/adt7470.c:936:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", 1000 * (20 + data->pwm_tmin[attr->in= dex])); ^~~~~~~ drivers/hwmon/adt7470.c:948:9: warning: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", 1000 * data->pwm_tmin[attr->index]); ^~~~~~~ drivers/hwmon/adt7470.c:948:9: note: Call to function 'sprintf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", 1000 * data->pwm_tmin[attr->index]); ^~~~~~~ drivers/hwmon/adt7470.c:987:10: warning: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", 1 << (ctrl - 1)); ^~~~~~~ drivers/hwmon/adt7470.c:987:10: note: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", 1 << (ctrl - 1)); ^~~~~~~ drivers/hwmon/adt7470.c:989:10: warning: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%d\n", ADT7470_PWM_ALL_TEMPS); ^~~~~~~ drivers/hwmon/adt7470.c:989:10: note: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%d\n", ADT7470_PWM_ALL_TEMPS); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/hwtracing/coresight/coresight-config.c:167:4: warning: Value sto= red to 'name' is never read [clang-analyzer-deadcode.DeadStores] name =3D feat_csdev->feat_desc->params_desc[j].n= ame; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-config.c:167:4: note: Value stored= to 'name' is never read name =3D feat_csdev->feat_desc->params_desc[j].n= ame; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-config.c:206:4: warning: Value sto= red to 'name' is never read [clang-analyzer-deadcode.DeadStores] name =3D feat_csdev->feat_desc->params_desc[j].n= ame; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-config.c:206:4: note: Value stored= to 'name' is never read name =3D feat_csdev->feat_desc->params_desc[j].n= ame; ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-config.c:234:3: warning: Value sto= red to 'csdev' is never read [clang-analyzer-deadcode.DeadStores] csdev =3D feat_csdev->csdev; ^ ~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-config.c:234:3: note: Value stored= to 'csdev' is never read csdev =3D feat_csdev->csdev; ^ ~~~~~~~~~~~~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. >> drivers/hwtracing/coresight/coresight-syscfg-configfs.c:195:3: warning: = Call to function 'snprintf' is insecure as it does not provide security che= cks introduced in the C11 standard. Replace with analogous functions that s= upport length arguments or provides boundary checks such as 'snprintf_s' in= case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferH= andling] snprintf(name, CONFIGFS_ITEM_NAME_LEN, "preset%d", prese= t_num); ^~~~~~~~ drivers/hwtracing/coresight/coresight-syscfg-configfs.c:195:3: note: Cal= l to function 'snprintf' is insecure as it does not provide security checks= introduced in the C11 standard. Replace with analogous functions that supp= ort length arguments or provides boundary checks such as 'snprintf_s' in ca= se of C11 snprintf(name, CONFIGFS_ITEM_NAME_LEN, "preset%d", prese= t_num); ^~~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 37 warnings generated. drivers/iio/industrialio-core.c:403:33: warning: Call to function 'snpri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'snprintf_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] iio_dev_opaque->read_buf_len =3D snprintf(iio_dev_opaque->read_b= uf, ^~~~~~~~ drivers/iio/industrialio-core.c:403:33: note: Call to function 'snprintf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'snprintf_s' in case of C11 iio_dev_opaque->read_buf_len =3D snprintf(iio_dev_opaque->read_b= uf, ^~~~~~~~ drivers/iio/industrialio-core.c:427:8: warning: Call to function 'sscanf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D sscanf(buf, "%i %i", ®, &val); ^~~~~~ drivers/iio/industrialio-core.c:427:8: note: Call to function 'sscanf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sscanf_s' in case of C11 ret =3D sscanf(buf, "%i %i", ®, &val); ^~~~~~ drivers/iio/industrialio-core.c:750:10: warning: Call to function 'sprin= tf' is insecure as it does not provide bounding of the memory buffer or sec= urity checks introduced in the C11 standard. Replace with analogous functio= ns that support length arguments or provides boundary checks such as 'sprin= tf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsaf= eBufferHandling] return sprintf(buf, "%s\n", this_attr->c->extend_name); ^~~~~~~ drivers/iio/industrialio-core.c:750:10: note: Call to function 'sprintf'= is insecure as it does not provide bounding of the memory buffer or securi= ty checks introduced in the C11 standard. Replace with analogous functions = that support length arguments or provides boundary checks such as 'sprintf_= s' in case of C11 return sprintf(buf, "%s\n", this_attr->c->extend_name); ^~~~~~~ drivers/iio/industrialio-core.c:984:7: warning: Call to function 'sscanf= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(buf, "%c", &ch) !=3D 1) ^~~~~~ drivers/iio/industrialio-core.c:984:7: note: Call to function 'sscanf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sscanf_s' in case of C11 if (sscanf(buf, "%c", &ch) !=3D 1) ^~~~~~ drivers/iio/industrialio-core.c:1458:2: warning: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, name, sz); ^~~~~~ drivers/iio/industrialio-core.c:1458:2: note: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, name, sz); ^~~~~~ drivers/iio/industrialio-core.c:1567:3: warning: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(iio_dev_opaque->chan_attr_group.attrs, ^~~~~~ drivers/iio/industrialio-core.c:1567:3: note: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 memcpy(iio_dev_opaque->chan_attr_group.attrs, ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 51 warnings generated. drivers/memstick/core/mspro_block.c:446:2: warning: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(name, x_spfile->name, 8); ^~~~~~ drivers/memstick/core/mspro_block.c:446:2: note: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 memcpy(name, x_spfile->name, 8); ^~~~~~ drivers/memstick/core/mspro_block.c:448:2: warning: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ext, x_spfile->ext, 3); ^~~~~~ drivers/memstick/core/mspro_block.c:448:2: note: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 memcpy(ext, x_spfile->ext, 3); ^~~~~~ drivers/memstick/core/mspro_block.c:1047:4: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(s_attr->name, sizeof(s_attr->name), "%s= ", ^~~~~~~~ drivers/memstick/core/mspro_block.c:1047:4: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(s_attr->name, sizeof(s_attr->name), "%s= ", ^~~~~~~~ drivers/memstick/core/mspro_block.c:1050:4: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(s_attr->name, sizeof(s_attr->name), ^~~~~~~~ drivers/memstick/core/mspro_block.c:1050:4: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(s_attr->name, sizeof(s_attr->name), ^~~~~~~~ drivers/memstick/core/mspro_block.c:1070:4: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(s_attr->data, buffer + addr % msb->page_s= ize, ^~~~~~ drivers/memstick/core/mspro_block.c:1070:4: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(s_attr->data, buffer + addr % msb->page_s= ize, ^~~~~~ drivers/memstick/core/mspro_block.c:1106:3: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(s_attr->data, buffer + addr % msb->page_size, ^~~~~~ drivers/memstick/core/mspro_block.c:1106:3: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(s_attr->data, buffer + addr % msb->page_size, ^~~~~~ drivers/memstick/core/mspro_block.c:1232:2: warning: Call to function 's= printf' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'sprintf_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(msb->disk->disk_name, "mspblk%d", disk_id); ^~~~~~~ drivers/memstick/core/mspro_block.c:1232:2: note: Call to function 'spri= ntf' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'sprintf_s' in case of C11 sprintf(msb->disk->disk_name, "mspblk%d", disk_id); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. -- ^ drivers/iio/adc/qcom-pm8xxx-xoadc.c:837:19: note: Calling 'devm_kcalloc' adc->iio_chans =3D devm_kcalloc(adc->dev, adc->nchans, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:224:9: note: Calling 'devm_kmalloc_array' return devm_kmalloc_array(dev, n, size, flags | __GFP_ZERO); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:216:2: note: Taking false branch if (unlikely(check_mul_overflow(n, size, &bytes))) ^ include/linux/device.h:219:2: note: Returning pointer, which participate= s in a condition later return devm_kmalloc(dev, bytes, flags); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:224:9: note: Returning from 'devm_kmalloc_array' return devm_kmalloc_array(dev, n, size, flags | __GFP_ZERO); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:224:2: note: Returning pointer, which participate= s in a condition later return devm_kmalloc_array(dev, n, size, flags | __GFP_ZERO); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:837:19: note: Returning from 'devm_k= calloc' adc->iio_chans =3D devm_kcalloc(adc->dev, adc->nchans, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:839:6: note: Assuming field 'iio_cha= ns' is non-null if (!adc->iio_chans) ^~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:839:2: note: Taking false branch if (!adc->iio_chans) ^ drivers/iio/adc/qcom-pm8xxx-xoadc.c:842:15: note: Calling 'devm_kcalloc' adc->chans =3D devm_kcalloc(adc->dev, adc->nchans, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:224:9: note: Calling 'devm_kmalloc_array' return devm_kmalloc_array(dev, n, size, flags | __GFP_ZERO); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:216:2: note: Taking false branch if (unlikely(check_mul_overflow(n, size, &bytes))) ^ include/linux/device.h:219:2: note: Returning pointer, which participate= s in a condition later return devm_kmalloc(dev, bytes, flags); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:224:9: note: Returning from 'devm_kmalloc_array' return devm_kmalloc_array(dev, n, size, flags | __GFP_ZERO); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:224:2: note: Returning pointer, which participate= s in a condition later return devm_kmalloc_array(dev, n, size, flags | __GFP_ZERO); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:842:15: note: Returning from 'devm_k= calloc' adc->chans =3D devm_kcalloc(adc->dev, adc->nchans, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:844:6: note: Assuming field 'chans' = is non-null if (!adc->chans) ^~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:844:2: note: Taking false branch if (!adc->chans) ^ drivers/iio/adc/qcom-pm8xxx-xoadc.c:848:39: note: Assuming 'child' is no= t equal to null for_each_available_child_of_node(np, child) { ^ include/linux/of.h:1371:58: note: expanded from macro 'for_each_availabl= e_child_of_node' for (child =3D of_get_next_available_child(parent, NULL); child = !=3D NULL; \ ^~~~~~~~= ~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:848:2: note: Loop condition is true.= Entering loop body for_each_available_child_of_node(np, child) { ^ include/linux/of.h:1371:2: note: expanded from macro 'for_each_available= _child_of_node' for (child =3D of_get_next_available_child(parent, NULL); child = !=3D NULL; \ ^ drivers/iio/adc/qcom-pm8xxx-xoadc.c:851:8: note: Passing value via 3rd p= arameter 'hw_channels' adc->variant->channels, ^~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:850:9: note: Calling 'pm8xxx_xoadc_p= arse_channel' ret =3D pm8xxx_xoadc_parse_channel(adc->dev, child, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:746:6: note: Assuming 'ret' is 0 if (ret) { ^~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:746:2: note: Taking false branch if (ret) { ^ drivers/iio/adc/qcom-pm8xxx-xoadc.c:751:6: note: Assuming 'ret' is 0 if (ret) { ^~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:751:2: note: Taking false branch if (ret) { ^ drivers/iio/adc/qcom-pm8xxx-xoadc.c:758:2: note: Value assigned to 'hwch= an' hwchan =3D &hw_channels[0]; ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:759:9: note: Assuming 'hwchan' is nu= ll while (hwchan && hwchan->datasheet_name) { ^~~~~~ drivers/iio/adc/qcom-pm8xxx-xoadc.c:759:16: note: Left side of '&&' is f= alse while (hwchan && hwchan->datasheet_name) { ^ drivers/iio/adc/qcom-pm8xxx-xoadc.c:767:7: note: Access to field 'datash= eet_name' results in a dereference of a null pointer (loaded from variable = 'hwchan') if (!hwchan->datasheet_name) { ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. >> sound/arm/aaci.c:846:2: warning: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 [clang-analyzer-security.insec= ureAPI.DeprecatedOrUnsafeBufferHandling] memset(&ac97_template, 0, sizeof(struct snd_ac97_template)); ^~~~~~ sound/arm/aaci.c:846:2: note: Call to function 'memset' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'memset_s' in case of C11 memset(&ac97_template, 0, sizeof(struct snd_ac97_template)); ^~~~~~ >> sound/arm/aaci.c:895:2: warning: Call to function 'snprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'snprintf_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(card->longname, sizeof(card->longname), ^~~~~~~~ sound/arm/aaci.c:895:2: note: Call to function 'snprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'snprintf_s' in case of C11 snprintf(card->longname, sizeof(card->longname), ^~~~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 40 warnings generated. sound/core/init.c:306:2: warning: Call to function 'snprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'snprintf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(card->irq_descr, sizeof(card->irq_descr), "%s:%s", ^~~~~~~~ sound/core/init.c:306:2: note: Call to function 'snprintf' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'snprintf_s' in case of C11 snprintf(card->irq_descr, sizeof(card->irq_descr), "%s:%s", ^~~~~~~~ sound/core/init.c:691:3: warning: Call to function 'strcpy' is insecure = as it does not provide bounding of the memory buffer. Replace unbounded cop= y functions with analogous functions that support length arguments such as = 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(id, "Default"); ^~~~~~ sound/core/init.c:691:3: note: Call to function 'strcpy' is insecure as = it does not provide bounding of the memory buffer. Replace unbounded copy f= unctions with analogous functions that support length arguments such as 'st= rlcpy'. CWE-119 strcpy(id, "Default"); ^~~~~~ sound/core/init.c:705:3: warning: Call to function 'sprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(sfxstr, "_%X", loops + 1); ^~~~~~~ sound/core/init.c:705:3: note: Call to function 'sprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'sprintf_s' in case of C11 sprintf(sfxstr, "_%X", loops + 1); ^~~~~~~ sound/core/init.c:711:3: warning: Call to function 'strcpy' is insecure = as it does not provide bounding of the memory buffer. Replace unbounded cop= y functions with analogous functions that support length arguments such as = 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(spos, sfxstr); ^~~~~~ sound/core/init.c:711:3: note: Call to function 'strcpy' is insecure as = it does not provide bounding of the memory buffer. Replace unbounded copy f= unctions with analogous functions that support length arguments such as 'st= rlcpy'. CWE-119 strcpy(spos, sfxstr); ^~~~~~ sound/core/init.c:765:2: warning: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf1, buf, copy); ^~~~~~ sound/core/init.c:765:2: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(buf1, buf, copy); ^~~~~~ sound/core/init.c:772:2: warning: Call to function 'strcpy' is insecure = as it does not provide bounding of the memory buffer. Replace unbounded cop= y functions with analogous functions that support length arguments such as = 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(card->id, buf1); ^~~~~~ sound/core/init.c:772:2: note: Call to function 'strcpy' is insecure as = it does not provide bounding of the memory buffer. Replace unbounded copy f= unctions with analogous functions that support length arguments such as 'st= rlcpy'. CWE-119 strcpy(card->id, buf1); ^~~~~~ sound/core/init.c:874:3: warning: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(tmpid, card->id, sizeof(card->id)); ^~~~~~ sound/core/init.c:874:3: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(tmpid, card->id, sizeof(card->id)); ^~~~~~ sound/core/init.c:1013:3: warning: Call to function 'strcat' is insecure= as it does not provide bounding of the memory buffer. Replace unbounded co= py functions with analogous functions that support length arguments such as= 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcat(card->components, " "); ^~~~~~ sound/core/init.c:1013:3: note: Call to function 'strcat' is insecure as= it does not provide bounding of the memory buffer. Replace unbounded copy = functions with analogous functions that support length arguments such as 's= trlcat'. CWE-119 strcat(card->components, " "); ^~~~~~ sound/core/init.c:1014:2: warning: Call to function 'strcat' is insecure= as it does not provide bounding of the memory buffer. Replace unbounded co= py functions with analogous functions that support length arguments such as= 'strlcat'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcat(card->components, component); ^~~~~~ sound/core/init.c:1014:2: note: Call to function 'strcat' is insecure as= it does not provide bounding of the memory buffer. Replace unbounded copy = functions with analogous functions that support length arguments such as 's= trlcat'. CWE-119 strcat(card->components, component); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/scsi/libsas/sas_scsi_host.c:87:4: warning: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(sc->sense_buffer, ts->buf, ^~~~~~ drivers/scsi/libsas/sas_scsi_host.c:87:4: note: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 memcpy(sc->sense_buffer, ts->buf, ^~~~~~ drivers/scsi/libsas/sas_scsi_host.c:150:2: warning: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(task->ssp_task.LUN, &lun.scsi_lun, 8); ^~~~~~ drivers/scsi/libsas/sas_scsi_host.c:150:2: note: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 memcpy(task->ssp_task.LUN, &lun.scsi_lun, 8); ^~~~~~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/scsi/libsas/sas_task.c:27:3: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(tstat->buf, iu->sense_data, tstat->buf_valid_size= ); ^~~~~~ drivers/scsi/libsas/sas_task.c:27:3: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(tstat->buf, iu->sense_data, tstat->buf_valid_size= ); ^~~~~~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 51 warnings generated. drivers/md/dm-table.c:117:2: warning: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(n_highs, -1, sizeof(*n_highs) * num); ^~~~~~ drivers/md/dm-table.c:117:2: note: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 memset(n_highs, -1, sizeof(*n_highs) * num); ^~~~~~ drivers/md/dm-table.c:359:6: warning: Call to function 'sscanf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(path, "%u:%u%c", &major, &minor, &dummy) =3D=3D 2) { ^~~~~~ drivers/md/dm-table.c:359:6: note: Call to function 'sscanf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'sscanf_s' in case of C11 if (sscanf(path, "%u:%u%c", &major, &minor, &dummy) =3D=3D 2) { ^~~~~~ drivers/md/dm-table.c:491:3: warning: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(argv, old_argv, *size * sizeof(*argv)); ^~~~~~ drivers/md/dm-table.c:491:3: note: Call to function 'memcpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memcpy_s' in case of C11 memcpy(argv, old_argv, *size * sizeof(*argv)); ^~~~~~ drivers/md/dm-table.c:652:2: warning: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(tgt, 0, sizeof(*tgt)); ^~~~~~ drivers/md/dm-table.c:652:2: note: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 memset(tgt, 0, sizeof(*tgt)); ^~~~~~ drivers/md/dm-table.c:743:7: warning: Call to function 'sscanf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] (sscanf(arg_str, "%u%c", value, &dummy) !=3D 1) || ^~~~~~ drivers/md/dm-table.c:743:7: note: Call to function 'sscanf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'sscanf_s' in case of C11 (sscanf(arg_str, "%u%c", value, &dummy) !=3D 1) || ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. >> drivers/hwtracing/coresight/coresight-tmc-core.c:298:9: warning: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-tmc-core.c:298:9: note: Call to fu= nction 'sprintf' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-tmc-core.c:323:9: warning: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#x\n", drvdata->size); ^~~~~~~ drivers/hwtracing/coresight/coresight-tmc-core.c:323:9: note: Call to fu= nction 'sprintf' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%#x\n", drvdata->size); ^~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 29 warnings generated. drivers/soundwire/master.c:47:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(revision, "0x%x\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:47:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 sdw_master_attr(revision, "0x%x\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:48:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(clk_stop_modes, "0x%x\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:48:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 sdw_master_attr(clk_stop_modes, "0x%x\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:49:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(max_clk_freq, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:49:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 sdw_master_attr(max_clk_freq, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:50:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(default_row, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:50:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 sdw_master_attr(default_row, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:51:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(default_col, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:51:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 sdw_master_attr(default_col, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:52:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(default_frame_rate, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:52:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 sdw_master_attr(default_frame_rate, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:53:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(dynamic_frame, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:53:1: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 sdw_master_attr(dynamic_frame, "%d\n"); ^ drivers/soundwire/master.c:43:9: note: expanded from macro 'sdw_master_a= ttr' return sprintf(buf, format_string, md->bus->prop.field); \ ^~~~~~~ drivers/soundwire/master.c:54:1: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sdw_master_attr(err_threshold, "%d\n"); -- ^~~ fs/ext4/readpage.c:357:11: note: Left side of '&&' is false if (bio && (last_block_in_bio !=3D blocks[0] - 1 || ^ fs/ext4/readpage.c:363:7: note: 'bio' is equal to NULL if (bio =3D=3D NULL) { ^~~ fs/ext4/readpage.c:363:3: note: Taking true branch if (bio =3D=3D NULL) { ^ fs/ext4/readpage.c:373:39: note: The left operand of '<<' is a garbage v= alue bio->bi_iter.bi_sector =3D blocks[0] << (blkbits= - 9); ~~~~~~~~~ ^ Suppressed 48 warnings (48 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/iio/chemical/atlas-ezo-sensor.c:108:2: warning: Call to function= 'memmove' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memmove_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(ptr, ptr + 1, strlen(ptr)); ^~~~~~~ drivers/iio/chemical/atlas-ezo-sensor.c:108:2: note: Call to function 'm= emmove' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memmove_s' in case of C11 memmove(ptr, ptr + 1, strlen(ptr)); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 24 warnings generated. drivers/iio/chemical/pms7003.c:243:2: warning: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(frame->data + frame->length, buf, num); ^~~~~~ drivers/iio/chemical/pms7003.c:243:2: note: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 memcpy(frame->data + frame->length, buf, num); ^~~~~~ Suppressed 23 warnings (23 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. drivers/hid/hid-quirks.c:1170:7: warning: Call to function 'sscanf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] m =3D sscanf(quirks_param[n], "0x%hx:0x%hx:0x%x", ^~~~~~ drivers/hid/hid-quirks.c:1170:7: note: Call to function 'sscanf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sscanf_s' in case of C11 m =3D sscanf(quirks_param[n], "0x%hx:0x%hx:0x%x", ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 39 warnings generated. drivers/hid/hid-debug.c:495:5: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buf, HID_DEBUG_BUFSIZE, "%s", ^~~~~~~~ drivers/hid/hid-debug.c:495:5: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(buf, HID_DEBUG_BUFSIZE, "%s", ^~~~~~~~ drivers/hid/hid-debug.c:505:3: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buf, HID_DEBUG_BUFSIZE, "%04x", page); ^~~~~~~~ drivers/hid/hid-debug.c:505:3: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(buf, HID_DEBUG_BUFSIZE, "%04x", page); ^~~~~~~~ drivers/hid/hid-debug.c:535:7: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buf + len, ^~~~~~~~ drivers/hid/hid-debug.c:535:7: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(buf + len, ^~~~~~~~ drivers/hid/hid-debug.c:547:3: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buf + len, HID_DEBUG_BUFSIZE - len, "%04x", ^~~~~~~~ drivers/hid/hid-debug.c:547:3: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(buf + len, HID_DEBUG_BUFSIZE - len, "%04x", ^~~~~~~~ drivers/hid/hid-debug.c:717:2: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buf, HID_DEBUG_BUFSIZE - 1, ^~~~~~~~ drivers/hid/hid-debug.c:717:2: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(buf, HID_DEBUG_BUFSIZE - 1, ^~~~~~~~ drivers/hid/hid-debug.c:723:3: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buf, HID_DEBUG_BUFSIZE - 1, ^~~~~~~~ drivers/hid/hid-debug.c:723:3: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(buf, HID_DEBUG_BUFSIZE - 1, ^~~~~~~~ drivers/hid/hid-debug.c:741:2: warning: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(buf + len, HID_DEBUG_BUFSIZE - len - 1, " =3D %d\n", va= lue); ^~~~~~~~ drivers/hid/hid-debug.c:741:2: note: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 snprintf(buf + len, HID_DEBUG_BUFSIZE - len - 1, " =3D %d\n", va= lue); ^~~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 36 warnings generated. >> drivers/media/mmc/siano/smssdio.c:253:2: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(¶ms, 0, sizeof(struct smsdevice_params_t)); ^~~~~~ drivers/media/mmc/siano/smssdio.c:253:2: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(¶ms, 0, sizeof(struct smsdevice_params_t)); ^~~~~~ >> drivers/media/mmc/siano/smssdio.c:260:2: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(params.devpath, sizeof(params.devpath), ^~~~~~~~ drivers/media/mmc/siano/smssdio.c:260:2: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 snprintf(params.devpath, sizeof(params.devpath), ^~~~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/media/test-drivers/vimc/vimc-core.c:29:8: warning: Excessive pad= ding in 'struct vimc_ent_link' (4 padding bytes, where 0 is optimal). = Optimal fields order: = src_ent, = sink_ent, = flags, = src_pad, = sink_pad, = consider reordering the fields or adding explicit padding members [clang= -analyzer-optin.performance.Padding] struct vimc_ent_link { ~~~~~~~^~~~~~~~~~~~~~~ drivers/media/test-drivers/vimc/vimc-core.c:29:8: note: Excessive paddin= g in 'struct vimc_ent_link' (4 padding bytes, where 0 is optimal). Optimal = fields order: src_ent, sink_ent, flags, src_pad, sink_pad, consider reorder= ing the fields or adding explicit padding members struct vimc_ent_link { ~~~~~~~^~~~~~~~~~~~~~~ drivers/media/test-drivers/vimc/vimc-core.c:293:2: warning: Call to func= tion 'snprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'snprintf_s' in case of C11= [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(vimc->mdev.bus_info, sizeof(vimc->mdev.bus_info), ^~~~~~~~ drivers/media/test-drivers/vimc/vimc-core.c:293:2: note: Call to functio= n 'snprintf' is insecure as it does not provide security checks introduced = in the C11 standard. Replace with analogous functions that support length a= rguments or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(vimc->mdev.bus_info, sizeof(vimc->mdev.bus_info), ^~~~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/md/persistent-data/dm-transaction-manager.c:296:2: warning: Call= to function 'memcpy' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'memcpy_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dm_block_data(*result), dm_block_data(orig_block), ^~~~~~ drivers/md/persistent-data/dm-transaction-manager.c:296:2: note: Call to= function 'memcpy' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(dm_block_data(*result), dm_block_data(orig_block), ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 63 warnings generated. drivers/md/persistent-data/dm-btree.c:22:2: warning: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dest, src, len); ^~~~~~ drivers/md/persistent-data/dm-btree.c:22:2: note: Call to function 'memc= py' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(dest, src, len); ^~~~~~ drivers/md/persistent-data/dm-btree.c:31:3: warning: Call to function 'm= emmove' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memmove_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memmove(base + (elt_size * (index + 1)), ^~~~~~~ drivers/md/persistent-data/dm-btree.c:31:3: note: Call to function 'memm= ove' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memmove_s' in case of C11 memmove(base + (elt_size * (index + 1)), ^~~~~~~ drivers/md/persistent-data/dm-btree.c:142:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(n, 0, block_size); ^~~~~~ drivers/md/persistent-data/dm-btree.c:142:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(n, 0, block_size); ^~~~~~ drivers/md/persistent-data/dm-btree.c:366:3: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(v, value_ptr(ro_node(s), i), value_size); ^~~~~~ drivers/md/persistent-data/dm-btree.c:366:3: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(v, value_ptr(ro_node(s), i), value_size); ^~~~~~ drivers/md/persistent-data/dm-btree.c:408:8: warning: Assigned value is = garbage or undefined [clang-analyzer-core.uninitialized.Assign] root =3D le64_to_cpu(internal_value_le); ^ drivers/md/persistent-data/dm-btree.c:377:2: note: 'internal_value_le' d= eclared without an initial value __le64 internal_value_le; ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/md/persistent-data/dm-btree.c:381:18: note: Assuming 'level' is = < field 'levels' for (level =3D 0; level < info->levels; level++) { ^~~~~~~~~~~~~~~~~~~~ drivers/md/persistent-data/dm-btree.c:381:2: note: Loop condition is tru= e. Entering loop body for (level =3D 0; level < info->levels; level++) { ^ drivers/md/persistent-data/dm-btree.c:385:7: note: Assuming 'level' is e= qual to 'last_level' if (level =3D=3D last_level) { ^~~~~~~~~~~~~~~~~~~ drivers/md/persistent-data/dm-btree.c:385:3: note: Taking true branch if (level =3D=3D last_level) { ^ drivers/md/persistent-data/dm-btree.c:398:7: note: Assuming 'r' is 0 if (!r) { ^~ drivers/md/persistent-data/dm-btree.c:398:3: note: Taking true branch if (!r) { ^ drivers/md/persistent-data/dm-btree.c:399:8: note: Assuming the conditio= n is false if (rkey !=3D keys[level]) { ^~~~~~~~~~~~~~~~~~~ drivers/md/persistent-data/dm-btree.c:399:4: note: Taking false branch if (rkey !=3D keys[level]) { ^ drivers/md/persistent-data/dm-btree.c:408:8: note: Assigned value is gar= bage or undefined root =3D le64_to_cpu(internal_value_le); ^ drivers/md/persistent-data/dm-btree.c:460:3: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] -- ^ drivers/scsi/sg.c:2088:18: note: Access to field 'res_in_use' results in= a dereference of a null pointer (loaded from variable 'sfp') sfp->res_in_use =3D 0; ~~~ ^ drivers/scsi/sg.c:2131:2: warning: Call to function 'memset' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'memset_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] memset(rp, 0, sizeof (Sg_request)); ^~~~~~ drivers/scsi/sg.c:2131:2: note: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 memset(rp, 0, sizeof (Sg_request)); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/dvb-frontends/stv6110x.c:75:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&buf[1], data, len); ^~~~~~ drivers/media/dvb-frontends/stv6110x.c:75:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&buf[1], data, len); ^~~~~~ drivers/media/dvb-frontends/stv6110x.c:340:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(stv6110x->regs, default_regs, 8); ^~~~~~ drivers/media/dvb-frontends/stv6110x.c:340:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(stv6110x->regs, default_regs, 8); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 59 warnings generated. drivers/media/dvb-frontends/m88ds3103.c:37:21: warning: Value stored to = 'client' during its initialization is never read [clang-analyzer-deadcode.D= eadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:37:21: note: Value stored to 'cl= ient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:173:21: warning: Value stored to= 'client' during its initialization is never read [clang-analyzer-deadcode.= DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:173:21: note: Value stored to 'c= lient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:379:21: warning: Value stored to= 'client' during its initialization is never read [clang-analyzer-deadcode.= DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:379:21: note: Value stored to 'c= lient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:385:6: warning: Value stored to = 'old_setting' during its initialization is never read [clang-analyzer-deadc= ode.DeadStores] u32 old_setting =3D dev->mclk; ^~~~~~~~~~~ ~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:385:6: note: Value stored to 'ol= d_setting' during its initialization is never read u32 old_setting =3D dev->mclk; ^~~~~~~~~~~ ~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:621:21: warning: Value stored to= 'client' during its initialization is never read [clang-analyzer-deadcode.= DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:621:21: note: Value stored to 'c= lient' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:895:3: warning: Value stored to = 'u16tmp' is never read [clang-analyzer-deadcode.DeadStores] u16tmp =3D 0; ^ ~ drivers/media/dvb-frontends/m88ds3103.c:895:3: note: Value stored to 'u1= 6tmp' is never read u16tmp =3D 0; ^ ~ drivers/media/dvb-frontends/m88ds3103.c:1141:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1141:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1180:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1180:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1370:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1370:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1416:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1416:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1466:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1466:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1545:21: warning: Value stored t= o 'client' during its initialization is never read [clang-analyzer-deadcode= .DeadStores] struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1545:21: note: Value stored to '= client' during its initialization is never read struct i2c_client *client =3D dev->client; ^~~~~~ ~~~~~~~~~~~ >> drivers/media/dvb-frontends/m88ds3103.c:1687:2: warning: Call to functio= n 'memset' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memset_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&board_info, 0, sizeof(board_info)); ^~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1687:2: note: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 memset(&board_info, 0, sizeof(board_info)); ^~~~~~ >> drivers/media/dvb-frontends/m88ds3103.c:1874:2: warning: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->fe.ops, &m88ds3103_ops, sizeof(struct dvb_frontend_= ops)); ^~~~~~ drivers/media/dvb-frontends/m88ds3103.c:1874:2: note: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dev->fe.ops, &m88ds3103_ops, sizeof(struct dvb_frontend_= ops)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/media/cec/core/cec-api.c:156:2: warning: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&log_addrs, &adap->log_addrs, sizeof(log_addrs)); ^~~~~~ drivers/media/cec/core/cec-api.c:156:2: note: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 memcpy(&log_addrs, &adap->log_addrs, sizeof(log_addrs)); ^~~~~~ drivers/media/cec/core/cec-api.c:158:3: warning: Call to function 'memse= t' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memset_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(log_addrs.log_addr, CEC_LOG_ADDR_INVALID, ^~~~~~ drivers/media/cec/core/cec-api.c:158:3: note: Call to function 'memset' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memset_s' in case of C11 memset(log_addrs.log_addr, CEC_LOG_ADDR_INVALID, ^~~~~~ include/linux/list.h:137:13: warning: Use of memory after it is freed [c= lang-analyzer-unix.Malloc] __list_del(entry->prev, entry->next); ^ drivers/media/cec/core/cec-api.c:645:6: note: Assuming 'fh' is not equal= to field 'cec_initiator' if (adap->cec_initiator =3D=3D fh) ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:645:2: note: Taking false branch if (adap->cec_initiator =3D=3D fh) ^ drivers/media/cec/core/cec-api.c:647:6: note: Assuming 'fh' is not equal= to field 'cec_follower' if (adap->cec_follower =3D=3D fh) { ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:647:2: note: Taking false branch if (adap->cec_follower =3D=3D fh) { ^ drivers/media/cec/core/cec-api.c:651:6: note: Assuming the condition is = false if (fh->mode_follower =3D=3D CEC_MODE_FOLLOWER) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:651:2: note: Taking false branch if (fh->mode_follower =3D=3D CEC_MODE_FOLLOWER) ^ drivers/media/cec/core/cec-api.c:653:6: note: Assuming the condition is = false if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_PIN) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:653:2: note: Taking false branch if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_PIN) ^ drivers/media/cec/core/cec-api.c:655:6: note: Assuming the condition is = false if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_ALL) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:655:2: note: Taking false branch if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_ALL) ^ drivers/media/cec/core/cec-api.c:664:6: note: Assuming the condition is = false if (cec_is_registered(adap) && list_empty(&devnode->fhs) && ^~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:664:30: note: Left side of '&&' is false if (cec_is_registered(adap) && list_empty(&devnode->fhs) && ^ drivers/media/cec/core/cec-api.c:672:2: note: Loop condition is false. E= xecution continues on line 680 while (!list_empty(&fh->xfer_list)) { ^ drivers/media/cec/core/cec-api.c:681:2: note: Loop condition is true. E= ntering loop body while (!list_empty(&fh->msgs)) { ^ drivers/media/cec/core/cec-api.c:686:3: note: Memory is released kfree(entry); ^~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:681:2: note: Loop condition is true. E= ntering loop body while (!list_empty(&fh->msgs)) { ^ drivers/media/cec/core/cec-api.c:685:3: note: Calling 'list_del' list_del(&entry->list); ^~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:148:2: note: Calling '__list_del_entry' __list_del_entry(entry); ^~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:134:6: note: Assuming the condition is false if (!__list_del_entry_valid(entry)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:134:2: note: Taking false branch if (!__list_del_entry_valid(entry)) ^ include/linux/list.h:137:13: note: Use of memory after it is freed __list_del(entry->prev, entry->next); ^~~~~~~~~~~ include/linux/list.h:149:14: warning: Use of memory after it is freed [c= lang-analyzer-unix.Malloc] entry->next =3D LIST_POISON1; ^ drivers/media/cec/core/cec-api.c:645:6: note: Assuming 'fh' is not equal= to field 'cec_initiator' if (adap->cec_initiator =3D=3D fh) ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:645:2: note: Taking false branch if (adap->cec_initiator =3D=3D fh) ^ drivers/media/cec/core/cec-api.c:647:6: note: Assuming 'fh' is not equal= to field 'cec_follower' if (adap->cec_follower =3D=3D fh) { ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:647:2: note: Taking false branch if (adap->cec_follower =3D=3D fh) { ^ drivers/media/cec/core/cec-api.c:651:6: note: Assuming the condition is = false if (fh->mode_follower =3D=3D CEC_MODE_FOLLOWER) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:651:2: note: Taking false branch if (fh->mode_follower =3D=3D CEC_MODE_FOLLOWER) ^ drivers/media/cec/core/cec-api.c:653:6: note: Assuming the condition is = false if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_PIN) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:653:2: note: Taking false branch if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_PIN) ^ drivers/media/cec/core/cec-api.c:655:6: note: Assuming the condition is = false if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_ALL) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:655:2: note: Taking false branch if (fh->mode_follower =3D=3D CEC_MODE_MONITOR_ALL) ^ drivers/media/cec/core/cec-api.c:664:6: note: Assuming the condition is = false if (cec_is_registered(adap) && list_empty(&devnode->fhs) && ^~~~~~~~~~~~~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:664:30: note: Left side of '&&' is false if (cec_is_registered(adap) && list_empty(&devnode->fhs) && ^ drivers/media/cec/core/cec-api.c:672:2: note: Loop condition is false. E= xecution continues on line 680 while (!list_empty(&fh->xfer_list)) { ^ drivers/media/cec/core/cec-api.c:681:2: note: Loop condition is true. E= ntering loop body while (!list_empty(&fh->msgs)) { ^ drivers/media/cec/core/cec-api.c:686:3: note: Memory is released kfree(entry); ^~~~~~~~~~~~ drivers/media/cec/core/cec-api.c:681:2: note: Loop condition is true. E= ntering loop body while (!list_empty(&fh->msgs)) { ^ drivers/media/cec/core/cec-api.c:685:3: note: Calling 'list_del' list_del(&entry->list); ^~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:149:14: note: Use of memory after it is freed entry->next =3D LIST_POISON1; ~~~~~~~~~~~ ^ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 36 warnings generated. drivers/mtd/ubi/io.c:321:2: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&ei, 0, sizeof(struct erase_info)); ^~~~~~ drivers/mtd/ubi/io.c:321:2: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(&ei, 0, sizeof(struct erase_info)); ^~~~~~ drivers/mtd/ubi/io.c:391:3: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ubi->peb_buf, patterns[i], ubi->peb_size); ^~~~~~ drivers/mtd/ubi/io.c:391:3: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(ubi->peb_buf, patterns[i], ubi->peb_size); ^~~~~~ drivers/mtd/ubi/io.c:396:3: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ubi->peb_buf, ~patterns[i], ubi->peb_size); ^~~~~~ drivers/mtd/ubi/io.c:396:3: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(ubi->peb_buf, ~patterns[i], ubi->peb_size); ^~~~~~ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. drivers/mtd/ubi/wl.c:1765:2: warning: Call to function 'sprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(ubi->bgt_name, UBI_BGT_NAME_PATTERN, ubi->ubi_num); ^~~~~~~ drivers/mtd/ubi/wl.c:1765:2: note: Call to function 'sprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sprintf_s' in case of C11 sprintf(ubi->bgt_name, UBI_BGT_NAME_PATTERN, ubi->ubi_num); ^~~~~~~ Suppressed 33 warnings (33 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/leds/leds-lp8501.c:223:9: warning: Call to function 'sscanf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D sscanf(data + offset, "%2s%n ", c, &nrchars); ^~~~~~ drivers/leds/leds-lp8501.c:223:9: note: Call to function 'sscanf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sscanf_s' in case of C11 ret =3D sscanf(data + offset, "%2s%n ", c, &nrchars); ^~~~~~ drivers/leds/leds-lp8501.c:227:9: warning: Call to function 'sscanf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D sscanf(c, "%2x", &cmd); ^~~~~~ drivers/leds/leds-lp8501.c:227:9: note: Call to function 'sscanf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sscanf_s' in case of C11 ret =3D sscanf(c, "%2x", &cmd); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. sound/soc/codecs/wm8731.c:106:3: warning: Value stored to 'best' is neve= r read [clang-analyzer-deadcode.DeadStores] best =3D 0; ^ ~ sound/soc/codecs/wm8731.c:106:3: note: Value stored to 'best' is never r= ead best =3D 0; ^ ~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. lib/seq_buf.c:64:9: warning: Call to function 'vsnprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'vsnprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] len =3D vsnprintf(s->buffer + s->len, s->size - s->len, = fmt, args); ^~~~~~~~~ lib/seq_buf.c:64:9: note: Call to function 'vsnprintf' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'vsnprintf_s' in case of C11 len =3D vsnprintf(s->buffer + s->len, s->size - s->len, = fmt, args); ^~~~~~~~~ lib/seq_buf.c:152:3: warning: Call to function 'memcpy' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecure= API.DeprecatedOrUnsafeBufferHandling] memcpy(s->buffer + s->len, str, len); ^~~~~~ lib/seq_buf.c:152:3: note: Call to function 'memcpy' is insecure as it d= oes not provide security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'memcpy_s' in case of C11 memcpy(s->buffer + s->len, str, len); ^~~~~~ lib/seq_buf.c:199:3: warning: Call to function 'memcpy' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecure= API.DeprecatedOrUnsafeBufferHandling] memcpy(s->buffer + s->len, mem, len); ^~~~~~ lib/seq_buf.c:199:3: note: Call to function 'memcpy' is insecure as it d= oes not provide security checks introduced in the C11 standard. Replace wit= h analogous functions that support length arguments or provides boundary ch= ecks such as 'memcpy_s' in case of C11 memcpy(s->buffer + s->len, mem, len); ^~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 4 warnings generated. Suppressed 4 warnings (4 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 2 warnings generated. Suppressed 2 warnings (2 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/i2c/cx25840/cx25840-firmware.c:131:3: warning: Call to fun= ction 'memcpy' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memcpy_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer + 2, ptr, len); ^~~~~~ drivers/media/i2c/cx25840/cx25840-firmware.c:131:3: note: Call to functi= on 'memcpy' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(buffer + 2, ptr, len); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/i2c/cx25840/cx25840-vbi.c:86:2: warning: Call to function = 'memset' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memset_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(svbi->service_lines, 0, sizeof(svbi->service_lines)); ^~~~~~ drivers/media/i2c/cx25840/cx25840-vbi.c:86:2: note: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 memset(svbi->service_lines, 0, sizeof(svbi->service_lines)); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. sound/core/pcm_native.c:220:2: warning: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(info, 0, sizeof(*info)); ^~~~~~ sound/core/pcm_native.c:220:2: note: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 memset(info, 0, sizeof(*info)); -- NAND_COMMON_TIMING_NS(conf, tADL_mi= n)), ^ include/linux/mtd/rawnand.h:587:2: note: expanded from macro 'NAND_COMMO= N_TIMING_NS' PSEC_TO_NSEC(NAND_COMMON_TIMING_PS((conf), timing_name)) ^ include/linux/mtd/rawnand.h:769:25: note: expanded from macro 'PSEC_TO_N= SEC' #define PSEC_TO_NSEC(x) __DIVIDE(x, 1000) ^ include/linux/mtd/rawnand.h:765:25: note: expanded from macro '__DIVIDE' (__typeof__(dividend))(sizeof(dividend) <=3D sizeof(unsigned lon= g) ? \ ^ drivers/mtd/nand/raw/nand_base.c:1701:10: note: '?' condition is true NAND_COMMON_TIMING_NS(conf, tADL_mi= n)), ^ include/linux/mtd/rawnand.h:587:15: note: expanded from macro 'NAND_COMM= ON_TIMING_NS' PSEC_TO_NSEC(NAND_COMMON_TIMING_PS((conf), timing_name)) ^ include/linux/mtd/rawnand.h:579:2: note: expanded from macro 'NAND_COMMO= N_TIMING_PS' nand_interface_is_sdr(conf) ? \ ^ drivers/mtd/nand/raw/nand_base.c:1708:7: note: 'len' is 2 if (len && nand_interface_is_nvddr(conf)) { ^~~ drivers/mtd/nand/raw/nand_base.c:1708:7: note: Left side of '&&' is true drivers/mtd/nand/raw/nand_base.c:1708:14: note: Calling 'nand_interface_= is_nvddr' if (len && nand_interface_is_nvddr(conf)) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/mtd/rawnand.h:633:2: note: Returning zero, which participa= tes in a condition later return conf->type =3D=3D NAND_NVDDR_IFACE; ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/nand_base.c:1708:14: note: Returning from 'nand_int= erface_is_nvddr' if (len && nand_interface_is_nvddr(conf)) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/nand_base.c:1708:3: note: Taking false branch if (len && nand_interface_is_nvddr(conf)) { ^ drivers/mtd/nand/raw/nand_base.c:1718:8: note: 'len' is 2 if (!len) ^~~ drivers/mtd/nand/raw/nand_base.c:1718:3: note: Taking false branch if (!len) ^ drivers/mtd/nand/raw/nand_base.c:1722:7: note: Assuming 'ret' is 0, whic= h participates in a condition later if (!ret && len && nand_interface_is_nvddr(conf)) { ^~~~ drivers/mtd/nand/raw/nand_base.c:1722:7: note: Left side of '&&' is true drivers/mtd/nand/raw/nand_base.c:1722:15: note: 'len' is 2 if (!ret && len && nand_interface_is_nvddr(conf)) { ^~~ drivers/mtd/nand/raw/nand_base.c:1722:7: note: Left side of '&&' is true if (!ret && len && nand_interface_is_nvddr(conf)) { ^ drivers/mtd/nand/raw/nand_base.c:1722:3: note: Taking false branch if (!ret && len && nand_interface_is_nvddr(conf)) { ^ drivers/mtd/nand/raw/nand_base.c:1729:3: note: Returning without writing= to '*buf' return ret; ^ drivers/mtd/nand/raw/nand_base.c:1729:3: note: Returning zero (loaded fr= om 'ret'), which participates in a condition later return ret; ^~~~~~~~~~ drivers/mtd/nand/raw/nand_base.c:5485:9: note: Returning from 'nand_read= id_op' ret =3D nand_readid_op(chip, 0, id, sizeof(id)); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/nand/raw/nand_base.c:5486:7: note: 'ret' is 0 if (ret) ^~~ drivers/mtd/nand/raw/nand_base.c:5486:3: note: Taking false branch if (ret) ^ drivers/mtd/nand/raw/nand_base.c:5489:19: note: The right operand of '!= =3D' is a garbage value if (nand_maf_id !=3D id[0] || nand_dev_id !=3D id[1]) { ^ ~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. drivers/of/device.c:59:29: warning: Value stored to 'of_node' during its= initialization is never read [clang-analyzer-deadcode.DeadStores] struct device_node *node, *of_node =3D dev->of_node; ^~~~~~~ ~~~~~~~~~~~~ drivers/of/device.c:59:29: note: Value stored to 'of_node' during its in= itialization is never read struct device_node *node, *of_node =3D dev->of_node; ^~~~~~~ ~~~~~~~~~~~~ drivers/of/device.c:254:10: warning: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] csize =3D snprintf(str, len, "of:N%pOFn%c%s", dev->of_node, 'T', ^~~~~~~~ drivers/of/device.c:254:10: note: Call to function 'snprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'snprintf_s' in case of C11 csize =3D snprintf(str, len, "of:N%pOFn%c%s", dev->of_node, 'T', ^~~~~~~~ drivers/of/device.c:267:11: warning: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] csize =3D snprintf(str, len, "C%s", compat); ^~~~~~~~ drivers/of/device.c:267:11: note: Call to function 'snprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'snprintf_s' in case of C11 csize =3D snprintf(str, len, "C%s", compat); ^~~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 62 warnings generated. >> drivers/scsi/ch.c:247:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:247:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(cmd,0,sizeof(cmd)); ^~~~~~ >> drivers/scsi/ch.c:264:3: warning: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data,buffer+16,16); ^~~~~~ drivers/scsi/ch.c:264:3: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(data,buffer+16,16); ^~~~~~ drivers/scsi/ch.c:284:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:284:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:304:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:304:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:429:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:429:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:448:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:448:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:471:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:471:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:519:2: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:519:2: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(cmd,0,sizeof(cmd)); ^~~~~~ drivers/scsi/ch.c:531:2: warning: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buffer,tag,32); ^~~~~~ drivers/scsi/ch.c:531:2: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(buffer,tag,32); ^~~~~~ drivers/scsi/ch.c:658:3: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(&vparams,0,sizeof(vparams)); ^~~~~~ drivers/scsi/ch.c:658:3: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(&vparams,0,sizeof(vparams)); ^~~~~~ >> drivers/scsi/ch.c:661:4: warning: Call to function 'strncpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(vparams.cvp_label1,vendor_labels[0],16); ^~~~~~~ drivers/scsi/ch.c:661:4: note: Call to function 'strncpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'strncpy_s' in case of C11 strncpy(vparams.cvp_label1,vendor_labels[0],16); ^~~~~~~ drivers/scsi/ch.c:665:4: warning: Call to function 'strncpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(vparams.cvp_label2,vendor_labels[1],16); ^~~~~~~ drivers/scsi/ch.c:665:4: note: Call to function 'strncpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'strncpy_s' in case of C11 strncpy(vparams.cvp_label2,vendor_labels[1],16); ^~~~~~~ drivers/scsi/ch.c:669:4: warning: Call to function 'strncpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(vparams.cvp_label3,vendor_labels[2],16); ^~~~~~~ drivers/scsi/ch.c:669:4: note: Call to function 'strncpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'strncpy_s' in case of C11 strncpy(vparams.cvp_label3,vendor_labels[2],16); ^~~~~~~ drivers/scsi/ch.c:673:4: warning: Call to function 'strncpy' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'strncpy_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] strncpy(vparams.cvp_label4,vendor_labels[3],16); ^~~~~~~ drivers/scsi/ch.c:673:4: note: Call to function 'strncpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'strncpy_s' in case of C11 strncpy(vparams.cvp_label4,vendor_labels[3],16); ^~~~~~~ drivers/scsi/ch.c:792:3: warning: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memset(ch_cmd, 0, sizeof(ch_cmd)); ^~~~~~ drivers/scsi/ch.c:792:3: note: Call to function 'memset' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memset_s' in case of C11 memset(ch_cmd, 0, sizeof(ch_cmd)); ^~~~~~ drivers/scsi/ch.c:830:5: warning: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(cge.cge_pvoltag,buffer+28,36); ^~~~~~ drivers/scsi/ch.c:830:5: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(cge.cge_pvoltag,buffer+28,36); ^~~~~~ drivers/scsi/ch.c:834:5: warning: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.inse= cureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(cge.cge_avoltag,buffer+64,36); ^~~~~~ drivers/scsi/ch.c:834:5: note: Call to function 'memcpy' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'memcpy_s' in case of C11 memcpy(cge.cge_avoltag,buffer+64,36); ^~~~~~ >> drivers/scsi/ch.c:914:2: warning: Call to function 'sprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(ch->name,"ch%d",ch->minor); ^~~~~~~ drivers/scsi/ch.c:914:2: note: Call to function 'sprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'sprintf_s' in case of C11 sprintf(ch->name,"ch%d",ch->minor); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 56 warnings generated. Suppressed 56 warnings (56 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 40 warnings generated. drivers/media/common/siano/smscoreapi.c:801:5: warning: Value stored to = 'rc' is never read [clang-analyzer-deadcode.DeadStores] rc =3D smscore_sendrequest_and_wait(core= dev, msg, ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~ drivers/media/common/siano/smscoreapi.c:801:5: note: Value stored to 'rc= ' is never read rc =3D smscore_sendrequest_and_wait(core= dev, msg, ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~ >> drivers/media/common/siano/smscoreapi.c:962:3: warning: Call to function= 'memcpy' is insecure as it does not provide security checks introduced in = the C11 standard. Replace with analogous functions that support length argu= ments or provides boundary checks such as 'memcpy_s' in case of C11 [clang-= analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data_msg->payload, payload, payload_size); ^~~~~~ drivers/media/common/siano/smscoreapi.c:962:3: note: Call to function 'm= emcpy' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(data_msg->payload, payload, payload_size); ^~~~~~ drivers/media/common/siano/smscoreapi.c:1166:3: warning: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(fw_buf, fw->data, fw->size); ^~~~~~ drivers/media/common/siano/smscoreapi.c:1166:3: note: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(fw_buf, fw->data, fw->size); ^~~~~~ drivers/media/common/siano/smscoreapi.c:1554:25: warning: Value stored t= o 'validity' during its initialization is never read [clang-analyzer-deadco= de.DeadStores] struct sms_msg_data *validity =3D (struct sms_ms= g_data *) phdr; ^~~~~~~~ ~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~ drivers/media/common/siano/smscoreapi.c:1554:25: note: Value stored to '= validity' during its initialization is never read struct sms_msg_data *validity =3D (struct sms_ms= g_data *) phdr; ^~~~~~~~ ~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~ include/linux/list.h:137:13: warning: Use of memory after it is freed [c= lang-analyzer-unix.Malloc] __list_del(entry->prev, entry->next); ^ drivers/media/common/siano/smscoreapi.c:1756:2: note: Loop condition is = false. Exiting loop spin_lock_irqsave(&coredev->clientslock, flags); ^ include/linux/spinlock.h:379:2: note: expanded from macro 'spin_lock_irq= save' raw_spin_lock_irqsave(spinlock_check(lock), flags); \ ^ include/linux/spinlock.h:240:2: note: expanded from macro 'raw_spin_lock= _irqsave' do { \ ^ drivers/media/common/siano/smscoreapi.c:1756:2: note: Loop condition is = false. Exiting loop spin_lock_irqsave(&coredev->clientslock, flags); ^ include/linux/spinlock.h:377:43: note: expanded from macro 'spin_lock_ir= qsave' #define spin_lock_irqsave(lock, flags) \ ^ drivers/media/common/siano/smscoreapi.c:1759:2: note: Loop condition is = true. Entering loop body while (!list_empty(&client->idlist)) { ^ drivers/media/common/siano/smscoreapi.c:1763:3: note: Memory is released kfree(identry); ^~~~~~~~~~~~~~ drivers/media/common/siano/smscoreapi.c:1759:2: note: Loop condition is = true. Entering loop body while (!list_empty(&client->idlist)) { ^ drivers/media/common/siano/smscoreapi.c:1762:3: note: Calling 'list_del' list_del(&identry->entry); ^~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:148:2: note: Calling '__list_del_entry' __list_del_entry(entry); ^~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:134:6: note: Assuming the condition is false if (!__list_del_entry_valid(entry)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:134:2: note: Taking false branch if (!__list_del_entry_valid(entry)) ^ include/linux/list.h:137:13: note: Use of memory after it is freed __list_del(entry->prev, entry->next); ^~~~~~~~~~~ include/linux/list.h:149:14: warning: Use of memory after it is freed [c= lang-analyzer-unix.Malloc] entry->next =3D LIST_POISON1; ^ drivers/media/common/siano/smscoreapi.c:1756:2: note: Loop condition is = false. Exiting loop spin_lock_irqsave(&coredev->clientslock, flags); ^ include/linux/spinlock.h:379:2: note: expanded from macro 'spin_lock_irq= save' raw_spin_lock_irqsave(spinlock_check(lock), flags); \ ^ include/linux/spinlock.h:240:2: note: expanded from macro 'raw_spin_lock= _irqsave' do { \ ^ drivers/media/common/siano/smscoreapi.c:1756:2: note: Loop condition is = false. Exiting loop spin_lock_irqsave(&coredev->clientslock, flags); ^ include/linux/spinlock.h:377:43: note: expanded from macro 'spin_lock_ir= qsave' #define spin_lock_irqsave(lock, flags) \ ^ drivers/media/common/siano/smscoreapi.c:1759:2: note: Loop condition is = true. Entering loop body while (!list_empty(&client->idlist)) { ^ drivers/media/common/siano/smscoreapi.c:1763:3: note: Memory is released kfree(identry); ^~~~~~~~~~~~~~ drivers/media/common/siano/smscoreapi.c:1759:2: note: Loop condition is = true. Entering loop body while (!list_empty(&client->idlist)) { ^ drivers/media/common/siano/smscoreapi.c:1762:3: note: Calling 'list_del' list_del(&identry->entry); ^~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:149:14: note: Use of memory after it is freed entry->next =3D LIST_POISON1; ~~~~~~~~~~~ ^ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. drivers/ssb/driver_chipcommon.c:130:12: warning: The left operand of '&'= is a garbage value [clang-analyzer-core.UndefinedBinaryOperatorResult] if (tmp & 0x10) -- ^ sound/soc/soc-pcm.c:1276:2: note: Loop condition is false. Execution con= tinues on line 1294 for_each_dpcm_be_safe(fe, stream, dpcm, d) { ^ include/sound/soc-dpcm.h:114:2: note: expanded from macro 'for_each_dpcm= _be_safe' list_for_each_entry_safe(_dpcm, __dpcm, &(fe)->dpcm[stream].be_c= lients, list_be) ^ include/linux/list.h:725:2: note: expanded from macro 'list_for_each_ent= ry_safe' for (pos =3D list_first_entry(head, typeof(*pos), member), = \ ^ sound/soc/soc-pcm.c:1296:2: note: Loop condition is true. Entering loop= body while (!list_empty(&deleted_dpcms)) { ^ sound/soc/soc-pcm.c:1301:3: note: Memory is released kfree(dpcm); ^~~~~~~~~~~ sound/soc/soc-pcm.c:1296:2: note: Loop condition is true. Entering loop= body while (!list_empty(&deleted_dpcms)) { ^ sound/soc/soc-pcm.c:1299:3: note: Calling 'list_del' list_del(&dpcm->list_fe); ^~~~~~~~~~~~~~~~~~~~~~~~ include/linux/list.h:149:14: note: Use of memory after it is freed entry->next =3D LIST_POISON1; ~~~~~~~~~~~ ^ sound/soc/soc-pcm.c:1993:3: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dpcm->hw_params, &fe->dpcm[stream].hw_params, ^~~~~~ sound/soc/soc-pcm.c:1993:3: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(&dpcm->hw_params, &fe->dpcm[stream].hw_params, ^~~~~~ sound/soc/soc-pcm.c:2002:3: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&be->dpcm[stream].hw_params, &dpcm->hw_params, ^~~~~~ sound/soc/soc-pcm.c:2002:3: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(&be->dpcm[stream].hw_params, &dpcm->hw_params, ^~~~~~ sound/soc/soc-pcm.c:2062:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&fe->dpcm[stream].hw_params, params, ^~~~~~ sound/soc/soc-pcm.c:2062:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(&fe->dpcm[stream].hw_params, params, ^~~~~~ sound/soc/soc-pcm.c:2820:3: warning: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(new_name, sizeof(new_name), "codec2codec(%s)", ^~~~~~~~ sound/soc/soc-pcm.c:2820:3: note: Call to function 'snprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'snprintf_s' in case of C11 snprintf(new_name, sizeof(new_name), "codec2codec(%s)", ^~~~~~~~ sound/soc/soc-pcm.c:2826:3: warning: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(new_name, sizeof(new_name), "(%s)", ^~~~~~~~ sound/soc/soc-pcm.c:2826:3: note: Call to function 'snprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'snprintf_s' in case of C11 snprintf(new_name, sizeof(new_name), "(%s)", ^~~~~~~~ sound/soc/soc-pcm.c:2833:4: warning: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(new_name, sizeof(new_name), "%s (*)", ^~~~~~~~ sound/soc/soc-pcm.c:2833:4: note: Call to function 'snprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'snprintf_s' in case of C11 snprintf(new_name, sizeof(new_name), "%s (*)", ^~~~~~~~ sound/soc/soc-pcm.c:2836:4: warning: Call to function 'snprintf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(new_name, sizeof(new_name), "%s %s-%d", ^~~~~~~~ sound/soc/soc-pcm.c:2836:4: note: Call to function 'snprintf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'snprintf_s' in case of C11 snprintf(new_name, sizeof(new_name), "%s %s-%d", ^~~~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 10 warnings generated. Suppressed 10 warnings (10 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 39 warnings generated. sound/soc/codecs/rt1308-sdw.c:212:2: warning: Value stored to 'efuse_m_b= tl_l' is never read [clang-analyzer-deadcode.DeadStores] efuse_m_btl_l =3D efuse_m_btl_l | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt1308-sdw.c:212:2: note: Value stored to 'efuse_m_btl_= l' is never read efuse_m_btl_l =3D efuse_m_btl_l | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt1308-sdw.c:216:2: warning: Value stored to 'efuse_c_b= tl_l' is never read [clang-analyzer-deadcode.DeadStores] efuse_c_btl_l =3D efuse_c_btl_l | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt1308-sdw.c:216:2: note: Value stored to 'efuse_c_btl_= l' is never read efuse_c_btl_l =3D efuse_c_btl_l | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt1308-sdw.c:220:2: warning: Value stored to 'efuse_m_b= tl_r' is never read [clang-analyzer-deadcode.DeadStores] efuse_m_btl_r =3D efuse_m_btl_r | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt1308-sdw.c:220:2: note: Value stored to 'efuse_m_btl_= r' is never read efuse_m_btl_r =3D efuse_m_btl_r | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt1308-sdw.c:224:2: warning: Value stored to 'efuse_c_b= tl_r' is never read [clang-analyzer-deadcode.DeadStores] efuse_c_btl_r =3D efuse_c_btl_r | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt1308-sdw.c:224:2: note: Value stored to 'efuse_c_btl_= r' is never read efuse_c_btl_r =3D efuse_c_btl_r | (tmp << 8); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~ >> sound/soc/codecs/rt1308-sdw.c:303:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&rt1308->params, params, sizeof(*params)); ^~~~~~ sound/soc/codecs/rt1308-sdw.c:303:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(&rt1308->params, params, sizeof(*params)); ^~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/mmc/core/sdio_cis.c:63:3: warning: Call to function 'strcpy' is = insecure as it does not provide bounding of the memory buffer. Replace unbo= unded copy functions with analogous functions that support length arguments= such as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(string, buf); ^~~~~~ drivers/mmc/core/sdio_cis.c:63:3: note: Call to function 'strcpy' is ins= ecure as it does not provide bounding of the memory buffer. Replace unbound= ed copy functions with analogous functions that support length arguments su= ch as 'strlcpy'. CWE-119 strcpy(string, buf); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/mmc/core/regulator.c:181:17: warning: Value stored to 'dev' duri= ng its initialization is never read [clang-analyzer-deadcode.DeadStores] struct device *dev =3D mmc_dev(mmc); ^~~ drivers/mmc/core/regulator.c:181:17: note: Value stored to 'dev' during = its initialization is never read struct device *dev =3D mmc_dev(mmc); ^~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 55 warnings generated. drivers/mmc/core/block.c:235:8: warning: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D snprintf(buf, PAGE_SIZE, "%d\n", locked); ^~~~~~~~ drivers/mmc/core/block.c:235:8: note: Call to function 'snprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'snprintf_s' in case of C11 ret =3D snprintf(buf, PAGE_SIZE, "%d\n", locked); ^~~~~~~~ drivers/mmc/core/block.c:296:8: warning: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D snprintf(buf, PAGE_SIZE, "%d\n", ^~~~~~~~ drivers/mmc/core/block.c:296:8: note: Call to function 'snprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'snprintf_s' in case of C11 ret =3D snprintf(buf, PAGE_SIZE, "%d\n", ^~~~~~~~ drivers/mmc/core/block.c:560:2: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&idata->ic.response, cmd.resp, sizeof(cmd.resp)); ^~~~~~ drivers/mmc/core/block.c:560:2: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(&idata->ic.response, cmd.resp, sizeof(cmd.resp)); ^~~~~~ drivers/mmc/core/block.c:924:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&cmd, 0, sizeof(struct mmc_command)); ^~~~~~ drivers/mmc/core/block.c:924:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(&cmd, 0, sizeof(struct mmc_command)); ^~~~~~ drivers/mmc/core/block.c:1305:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(brq, 0, sizeof(struct mmc_blk_request)); ^~~~~~ drivers/mmc/core/block.c:1305:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(brq, 0, sizeof(struct mmc_blk_request)); ^~~~~~ drivers/mmc/core/block.c:1522:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(brq, 0, sizeof(*brq)); ^~~~~~ drivers/mmc/core/block.c:1522:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(brq, 0, sizeof(*brq)); ^~~~~~ drivers/mmc/core/block.c:2419:2: warning: Call to function 'snprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(md->disk->disk_name, sizeof(md->disk->disk_name), ^~~~~~~~ drivers/mmc/core/block.c:2419:2: note: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 snprintf(md->disk->disk_name, sizeof(md->disk->disk_name), ^~~~~~~~ drivers/mmc/core/block.c:2612:2: warning: Call to function 'snprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(rpmb_name, sizeof(rpmb_name), ^~~~~~~~ drivers/mmc/core/block.c:2612:2: note: Call to function 'snprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'snprintf_s' in case of C11 snprintf(rpmb_name, sizeof(rpmb_name), ^~~~~~~~ drivers/mmc/core/block.c:2794:8: warning: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] n +=3D sprintf(buf + n, "%02x", ext_csd[i]); ^~~~~~~ drivers/mmc/core/block.c:2794:8: note: Call to function 'sprintf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sprintf_s' in case of C11 n +=3D sprintf(buf + n, "%02x", ext_csd[i]); -- ret =3D coresight_validate_source(csdev, __func__); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1075:6: note: Assuming 'typ= e' is equal to CORESIGHT_DEV_TYPE_SOURCE if (type !=3D CORESIGHT_DEV_TYPE_SOURCE) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1075:2: note: Taking false = branch if (type !=3D CORESIGHT_DEV_TYPE_SOURCE) { ^ drivers/hwtracing/coresight/coresight-core.c:1080:6: note: Assuming 'sub= type' is not equal to CORESIGHT_DEV_SUBTYPE_SOURCE_PROC if (subtype !=3D CORESIGHT_DEV_SUBTYPE_SOURCE_PROC && ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1080:6: note: Left side of = '&&' is true drivers/hwtracing/coresight/coresight-core.c:1081:6: note: Assuming 'sub= type' is equal to CORESIGHT_DEV_SUBTYPE_SOURCE_SOFTWARE subtype !=3D CORESIGHT_DEV_SUBTYPE_SOURCE_SOFTWARE) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1080:2: note: Taking false = branch if (subtype !=3D CORESIGHT_DEV_SUBTYPE_SOURCE_PROC && ^ drivers/hwtracing/coresight/coresight-core.c:1086:2: note: Returning wit= hout writing to 'csdev->enable', which participates in a condition later return 0; ^ drivers/hwtracing/coresight/coresight-core.c:1086:2: note: Returning zer= o, which participates in a condition later return 0; ^~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1176:8: note: Returning fro= m 'coresight_validate_source' ret =3D coresight_validate_source(csdev, __func__); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1177:6: note: 'ret' is 0 if (ret) ^~~ drivers/hwtracing/coresight/coresight-core.c:1177:2: note: Taking false = branch if (ret) ^ drivers/hwtracing/coresight/coresight-core.c:1180:6: note: Assuming fiel= d 'enable' is true if (!csdev->enable || !coresight_disable_source(csdev)) ^~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1180:6: note: Left side of = '||' is false drivers/hwtracing/coresight/coresight-core.c:1180:25: note: Calling 'cor= esight_disable_source' if (!csdev->enable || !coresight_disable_source(csdev)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:469:6: note: Assuming the c= ondition is true if (atomic_dec_return(csdev->refcnt) =3D=3D 0) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:469:2: note: Taking true br= anch if (atomic_dec_return(csdev->refcnt) =3D=3D 0) { ^ drivers/hwtracing/coresight/coresight-core.c:470:18: note: Assuming fiel= d 'disable' is null if (source_ops(csdev)->disable) ^ include/linux/coresight.h:279:27: note: expanded from macro 'source_ops' #define source_ops(csdev) csdev->ops->source_ops ^ drivers/hwtracing/coresight/coresight-core.c:470:3: note: Taking false b= ranch if (source_ops(csdev)->disable) ^ drivers/hwtracing/coresight/coresight-core.c:475:2: note: Returning the = value 1, which participates in a condition later return !csdev->enable; ^~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1180:25: note: Returning fr= om 'coresight_disable_source' if (!csdev->enable || !coresight_disable_source(csdev)) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1180:2: note: Taking false = branch if (!csdev->enable || !coresight_disable_source(csdev)) ^ drivers/hwtracing/coresight/coresight-core.c:1183:2: note: Control jumps= to the 'default' case at line 1193 switch (csdev->subtype.source_subtype) { ^ drivers/hwtracing/coresight/coresight-core.c:1195:3: note: Execution co= ntinues on line 1198 break; ^ drivers/hwtracing/coresight/coresight-core.c:1199:25: note: Passing null= pointer value via 1st parameter 'path' coresight_release_path(path); ^~~~ drivers/hwtracing/coresight/coresight-core.c:1199:2: note: Calling 'core= sight_release_path' coresight_release_path(path); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:881:2: note: Access to fiel= d 'next' results in a dereference of a null pointer (loaded from variable '= path') list_for_each_entry_safe(nd, next, path, link) { ^ include/linux/list.h:725:13: note: expanded from macro 'list_for_each_en= try_safe' for (pos =3D list_first_entry(head, typeof(*pos), member), = \ ^ ~~~~ include/linux/list.h:531:2: note: expanded from macro 'list_first_entry' list_entry((ptr)->next, type, member) ^ ~~~ include/linux/list.h:520:2: note: expanded from macro 'list_entry' container_of(ptr, type, member) ^ ~~~ include/linux/container_of.h:18:25: note: expanded from macro 'container= _of' void *__mptr =3D (void *)(ptr); = \ ^~~~ drivers/hwtracing/coresight/coresight-core.c:1737:4: warning: Value stor= ed to 'idx' is never read [clang-analyzer-deadcode.DeadStores] idx =3D -ENOMEM; ^ ~~~~~~~ drivers/hwtracing/coresight/coresight-core.c:1737:4: note: Value stored = to 'idx' is never read idx =3D -ENOMEM; ^ ~~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 38 warnings generated. >> sound/soc/generic/audio-graph-card.c:301:3: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(dai_name, sizeof(dai_name), ^~~~~~~~ sound/soc/generic/audio-graph-card.c:301:3: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(dai_name, sizeof(dai_name), ^~~~~~~~ sound/soc/generic/audio-graph-card.c:336:3: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(dai_name, sizeof(dai_name), ^~~~~~~~ sound/soc/generic/audio-graph-card.c:336:3: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(dai_name, sizeof(dai_name), ^~~~~~~~ sound/soc/generic/audio-graph-card.c:369:17: warning: Value stored to 'd= ev' during its initialization is never read [clang-analyzer-deadcode.DeadSt= ores] struct device *dev =3D simple_priv_to_dev(priv); ^~~ sound/soc/generic/audio-graph-card.c:369:17: note: Value stored to 'dev'= during its initialization is never read struct device *dev =3D simple_priv_to_dev(priv); ^~~ sound/soc/generic/audio-graph-card.c:387:2: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(dai_name, sizeof(dai_name), ^~~~~~~~ sound/soc/generic/audio-graph-card.c:387:2: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(dai_name, sizeof(dai_name), ^~~~~~~~ >> sound/soc/generic/audio-graph-card.c:462:4: warning: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&adata, 0, sizeof(adata)); ^~~~~~ sound/soc/generic/audio-graph-card.c:462:4: note: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 memset(&adata, 0, sizeof(adata)); ^~~~~~ sound/soc/generic/audio-graph-card.c:571:2: warning: Call to function 'm= emset' is insecure as it does not provide security checks introduced in the= C11 standard. Replace with analogous functions that support length argumen= ts or provides boundary checks such as 'memset_s' in case of C11 [clang-ana= lyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(li, 0, sizeof(*li)); ^~~~~~ sound/soc/generic/audio-graph-card.c:571:2: note: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 memset(li, 0, sizeof(*li)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/media/v4l2-core/v4l2-device.c:37:3: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(v4l2_dev->name, sizeof(v4l2_dev->name), "%s %s", ^~~~~~~~ drivers/media/v4l2-core/v4l2-device.c:37:3: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(v4l2_dev->name, sizeof(v4l2_dev->name), "%s %s", ^~~~~~~~ drivers/media/v4l2-core/v4l2-device.c:67:3: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(v4l2_dev->name, sizeof(v4l2_dev->name), ^~~~~~~~ drivers/media/v4l2-core/v4l2-device.c:67:3: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(v4l2_dev->name, sizeof(v4l2_dev->name), ^~~~~~~~ drivers/media/v4l2-core/v4l2-device.c:70:3: warning: Call to function 's= nprintf' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'snprintf_s' in case of C11 [clang= -analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(v4l2_dev->name, sizeof(v4l2_dev->name), ^~~~~~~~ drivers/media/v4l2-core/v4l2-device.c:70:3: note: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 snprintf(v4l2_dev->name, sizeof(v4l2_dev->name), ^~~~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (31 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 31 warnings generated. Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. drivers/scsi/libsas/sas_ata.c:123:3: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dev->sata_dev.fis, resp->ending_fis, ATA_RESP_FIS= _SIZE); ^~~~~~ drivers/scsi/libsas/sas_ata.c:123:3: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(dev->sata_dev.fis, resp->ending_fis, ATA_RESP_FIS= _SIZE); ^~~~~~ drivers/scsi/libsas/sas_ata.c:196:3: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(task->ata_task.atapi_packet, qc->cdb, qc->dev->cd= b_len); ^~~~~~ drivers/scsi/libsas/sas_ata.c:196:3: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(task->ata_task.atapi_packet, qc->cdb, qc->dev->cd= b_len); ^~~~~~ drivers/scsi/libsas/sas_ata.c:273:3: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dev->frame_rcvd, &dev->sata_dev.rps_resp.rps.fis, ^~~~~~ drivers/scsi/libsas/sas_ata.c:273:3: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(dev->frame_rcvd, &dev->sata_dev.rps_resp.rps.fis, ^~~~~~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 25 warnings generated. Suppressed 25 warnings (25 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 10 warnings generated. Suppressed 10 warnings (10 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/md/persistent-data/dm-btree-spine.c:251:2: warning: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 [cl= ang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&v1_le, value1_le, sizeof(v1_le)); ^~~~~~ drivers/md/persistent-data/dm-btree-spine.c:251:2: note: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&v1_le, value1_le, sizeof(v1_le)); ^~~~~~ drivers/md/persistent-data/dm-btree-spine.c:252:2: warning: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 [cl= ang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&v2_le, value2_le, sizeof(v2_le)); ^~~~~~ drivers/md/persistent-data/dm-btree-spine.c:252:2: note: Call to functio= n 'memcpy' is insecure as it does not provide security checks introduced in= the C11 standard. Replace with analogous functions that support length arg= uments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&v2_le, value2_le, sizeof(v2_le)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 51 warnings generated. drivers/md/dm-raid1.c:943:6: warning: Call to function 'sscanf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[1], "%llu%c", &offset, &dummy) !=3D 1 || ^~~~~~ drivers/md/dm-raid1.c:943:6: note: Call to function 'sscanf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[1], "%llu%c", &offset, &dummy) !=3D 1 || ^~~~~~ drivers/md/dm-raid1.c:980:6: warning: Call to function 'sscanf' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[1], "%u%c", ¶m_count, &dummy) !=3D 1) { ^~~~~~ drivers/md/dm-raid1.c:980:6: note: Call to function 'sscanf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[1], "%u%c", ¶m_count, &dummy) !=3D 1) { ^~~~~~ drivers/md/dm-raid1.c:1015:6: warning: Call to function 'sscanf' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security= .insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[0], "%u%c", &num_features, &dummy) !=3D 1) { ^~~~~~ drivers/md/dm-raid1.c:1015:6: note: Call to function 'sscanf' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[0], "%u%c", &num_features, &dummy) !=3D 1) { ^~~~~~ drivers/md/dm-raid1.c:1078:15: warning: Call to function 'sscanf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] if (!argc || sscanf(argv[0], "%u%c", &nr_mirrors, &dummy) !=3D 1= || ^~~~~~ drivers/md/dm-raid1.c:1078:15: note: Call to function 'sscanf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sscanf_s' in case of C11 if (!argc || sscanf(argv[0], "%u%c", &nr_mirrors, &dummy) !=3D 1= || ^~~~~~ drivers/md/dm-raid1.c:1135:2: warning: Value stored to 'argv' is never r= ead [clang-analyzer-deadcode.DeadStores] argv +=3D args_used; ^ ~~~~~~~~~ drivers/md/dm-raid1.c:1135:2: note: Value stored to 'argv' is never read argv +=3D args_used; ^ ~~~~~~~~~ drivers/md/dm-raid1.c:1415:3: warning: Value stored to 'sz' is never rea= d [clang-analyzer-deadcode.DeadStores] sz +=3D log->type->status(log, type, result+sz, maxlen-s= z); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/md/dm-raid1.c:1415:3: note: Value stored to 'sz' is never read sz +=3D log->type->status(log, type, result+sz, maxlen-s= z); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/bio.h:567:6: warning: Access to field 'tail' results in a = dereference of a null pointer (loaded from variable 'bl') [clang-analyzer-c= ore.NullDereference] if (bl->tail) ^ drivers/md/dm-raid1.c:857:2: note: Loop condition is false. Exiting loop spin_lock_irqsave(&ms->lock, flags); ^ include/linux/spinlock.h:379:2: note: expanded from macro 'spin_lock_irq= save' raw_spin_lock_irqsave(spinlock_check(lock), flags); \ ^ include/linux/spinlock.h:240:2: note: expanded from macro 'raw_spin_lock= _irqsave' do { \ ^ drivers/md/dm-raid1.c:857:2: note: Loop condition is false. Exiting loop spin_lock_irqsave(&ms->lock, flags); ^ include/linux/spinlock.h:377:43: note: expanded from macro 'spin_lock_ir= qsave' #define spin_lock_irqsave(lock, flags) \ ^ drivers/md/dm-raid1.c:869:2: note: Calling 'do_writes' do_writes(ms, &writes); ^~~~~~~~~~~~~~~~~~~~~~ drivers/md/dm-raid1.c:683:42: note: 'this_list' initialized to a null po= inter value struct bio_list sync, nosync, recover, *this_list =3D NULL; ^~~~~~~~~ drivers/md/dm-raid1.c:688:6: note: Assuming field 'head' is non-null if (!writes->head) ^~~~~~~~~~~~~ drivers/md/dm-raid1.c:688:2: note: Taking false branch if (!writes->head) ^ drivers/md/dm-raid1.c:699:2: note: Loop condition is true. Entering loo= p body while ((bio =3D bio_list_pop(writes))) { ^ drivers/md/dm-raid1.c:700:8: note: Assuming the condition is false if ((bio->bi_opf & REQ_PREFLUSH) || ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/md/dm-raid1.c:700:7: note: Left side of '||' is false if ((bio->bi_opf & REQ_PREFLUSH) || ^ drivers/md/dm-raid1.c:701:8: note: Assuming the condition is false (bio_op(bio) =3D=3D REQ_OP_DISCARD)) { ^ include/linux/blk_types.h:455:2: note: expanded from macro 'bio_op' ((bio)->bi_opf & REQ_OP_MASK) ^ drivers/md/dm-raid1.c:700:3: note: Taking false branch if ((bio->bi_opf & REQ_PREFLUSH) || ^ drivers/md/dm-raid1.c:708:7: note: Assuming field 'is_remote_recovering'= is null if (log->type->is_remote_recovering && ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/md/dm-raid1.c:708:39: note: Left side of '&&' is false if (log->type->is_remote_recovering && ^ drivers/md/dm-raid1.c:715:3: note: 'Default' branch taken. Execution con= tinues on line 730 switch (state) { ^ drivers/md/dm-raid1.c:730:16: note: Passing null pointer value via 1st p= arameter 'bl' bio_list_add(this_list, bio); ^~~~~~~~~ drivers/md/dm-raid1.c:730:3: note: Calling 'bio_list_add' bio_list_add(this_list, bio); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/bio.h:567:6: note: Access to field 'tail' results in a der= eference of a null pointer (loaded from variable 'bl') if (bl->tail) ^~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 56 warnings generated. >> drivers/hwtracing/coresight/coresight-etm-perf.c:55:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(cycacc, "config:" __stringify(ETM_OPT_CYCACC)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:55:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(cycacc, "config:" __stringify(ETM_OPT_CYCACC)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:57:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(contextid1, "config:" __stringify(ETM_OPT_CTXTID)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:57:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(contextid1, "config:" __stringify(ETM_OPT_CTXTID)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:59:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(contextid2, "config:" __stringify(ETM_OPT_CTXTID2)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:59:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(contextid2, "config:" __stringify(ETM_OPT_CTXTID2)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:60:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(timestamp, "config:" __stringify(ETM_OPT_TS)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:60:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(timestamp, "config:" __stringify(ETM_OPT_TS)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:61:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(retstack, "config:" __stringify(ETM_OPT_RETSTK)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:61:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(retstack, "config:" __stringify(ETM_OPT_RETSTK)); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:63:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(preset, "config:0-3"); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:63:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(preset, "config:0-3"); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:65:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(sinkid, "config2:0-31"); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:65:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(sinkid, "config2:0-31"); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:67:1: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] PMU_FORMAT_ATTR(configid, "config2:32-63"); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:67:1: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 PMU_FORMAT_ATTR(configid, "config2:32-63"); ^ include/linux/perf_event.h:1619:9: note: expanded from macro 'PMU_FORMAT= _ATTR' return sprintf(page, _format "\n"); \ ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:84:9: warning: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(page, "config:%d\n", pid_fmt); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:84:9: note: Call to fun= ction 'sprintf' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(page, "config:%d\n", pid_fmt); ^~~~~~~ >> drivers/hwtracing/coresight/coresight-etm-perf.c:157:3: warning: Call to= function 'memcpy' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'memcpy_s' in case of C1= 1 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(filters, event->parent->hw.addr_filters, ^~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:157:3: note: Call to fu= nction 'memcpy' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(filters, event->parent->hw.addr_filters, ^~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:701:2: warning: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(entry, "cpu%d", cpu); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm-perf.c:701:2: note: Call to fu= nction 'sprintf' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'sprintf_s' in case of C11 sprintf(entry, "cpu%d", cpu); ^~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. drivers/soundwire/sysfs_slave_dpn.c:98:1: warning: Call to function 'spr= intf' is insecure as it does not provide bounding of the memory buffer or s= ecurity checks introduced in the C11 standard. Replace with analogous funct= ions that support length arguments or provides boundary checks such as 'spr= intf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUns= afeBufferHandling] sdw_dpn_attr(imp_def_interrupts); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:98:1: note: Call to function 'sprint= f' is insecure as it does not provide bounding of the memory buffer or secu= rity checks introduced in the C11 standard. Replace with analogous function= s that support length arguments or provides boundary checks such as 'sprint= f_s' in case of C11 sdw_dpn_attr(imp_def_interrupts); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:99:1: warning: Call to function 'spr= intf' is insecure as it does not provide bounding of the memory buffer or s= ecurity checks introduced in the C11 standard. Replace with analogous funct= ions that support length arguments or provides boundary checks such as 'spr= intf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUns= afeBufferHandling] sdw_dpn_attr(max_word); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:99:1: note: Call to function 'sprint= f' is insecure as it does not provide bounding of the memory buffer or secu= rity checks introduced in the C11 standard. Replace with analogous function= s that support length arguments or provides boundary checks such as 'sprint= f_s' in case of C11 sdw_dpn_attr(max_word); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:100:1: warning: Call to function 'sp= rintf' is insecure as it does not provide bounding of the memory buffer or = security checks introduced in the C11 standard. Replace with analogous func= tions that support length arguments or provides boundary checks such as 'sp= rintf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUn= safeBufferHandling] sdw_dpn_attr(min_word); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:100:1: note: Call to function 'sprin= tf' is insecure as it does not provide bounding of the memory buffer or sec= urity checks introduced in the C11 standard. Replace with analogous functio= ns that support length arguments or provides boundary checks such as 'sprin= tf_s' in case of C11 sdw_dpn_attr(min_word); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:101:1: warning: Call to function 'sp= rintf' is insecure as it does not provide bounding of the memory buffer or = security checks introduced in the C11 standard. Replace with analogous func= tions that support length arguments or provides boundary checks such as 'sp= rintf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUn= safeBufferHandling] sdw_dpn_attr(type); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:101:1: note: Call to function 'sprin= tf' is insecure as it does not provide bounding of the memory buffer or sec= urity checks introduced in the C11 standard. Replace with analogous functio= ns that support length arguments or provides boundary checks such as 'sprin= tf_s' in case of C11 sdw_dpn_attr(type); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:102:1: warning: Call to function 'sp= rintf' is insecure as it does not provide bounding of the memory buffer or = security checks introduced in the C11 standard. Replace with analogous func= tions that support length arguments or provides boundary checks such as 'sp= rintf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUn= safeBufferHandling] sdw_dpn_attr(max_grouping); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:102:1: note: Call to function 'sprin= tf' is insecure as it does not provide bounding of the memory buffer or sec= urity checks introduced in the C11 standard. Replace with analogous functio= ns that support length arguments or provides boundary checks such as 'sprin= tf_s' in case of C11 sdw_dpn_attr(max_grouping); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:103:1: warning: Call to function 'sp= rintf' is insecure as it does not provide bounding of the memory buffer or = security checks introduced in the C11 standard. Replace with analogous func= tions that support length arguments or provides boundary checks such as 'sp= rintf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUn= safeBufferHandling] sdw_dpn_attr(simple_ch_prep_sm); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:103:1: note: Call to function 'sprin= tf' is insecure as it does not provide bounding of the memory buffer or sec= urity checks introduced in the C11 standard. Replace with analogous functio= ns that support length arguments or provides boundary checks such as 'sprin= tf_s' in case of C11 sdw_dpn_attr(simple_ch_prep_sm); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:104:1: warning: Call to function 'sp= rintf' is insecure as it does not provide bounding of the memory buffer or = security checks introduced in the C11 standard. Replace with analogous func= tions that support length arguments or provides boundary checks such as 'sp= rintf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUn= safeBufferHandling] sdw_dpn_attr(ch_prep_timeout); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:104:1: note: Call to function 'sprin= tf' is insecure as it does not provide bounding of the memory buffer or sec= urity checks introduced in the C11 standard. Replace with analogous functio= ns that support length arguments or provides boundary checks such as 'sprin= tf_s' in case of C11 sdw_dpn_attr(ch_prep_timeout); ^ drivers/soundwire/sysfs_slave_dpn.c:75:11: note: expanded from macro 'sd= w_dpn_attr' return sprintf(buf, format_string, \ ^~~~~~~ drivers/soundwire/sysfs_slave_dpn.c:105:1: warning: Call to function 'sp= rintf' is insecure as it does not provide bounding of the memory buffer or = security checks introduced in the C11 standard. Replace with analogous func= tions that support length arguments or provides boundary checks such as 'sp= rintf_s' in case of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUn= safeBufferHandling] sdw_dpn_attr(max_ch); -- ^~~~~~~~~~~~~ lib/vsprintf.c:1342:3: note: Taking false branch if (leading_zeros) { ^ lib/vsprintf.c:1349:10: note: The value 1 is assigned to 'digits' while (digits--) ^~~~~~~~ lib/vsprintf.c:1349:3: note: Loop condition is true. Entering loop body while (digits--) ^ lib/vsprintf.c:1350:9: note: Assigned value is garbage or undefined *p++ =3D temp[digits]; ^ ~~~~~~~~~~~~ lib/vsprintf.c:1373:2: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&in6, addr, sizeof(struct in6_addr)); ^~~~~~ lib/vsprintf.c:1373:2: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(&in6, addr, sizeof(struct in6_addr)); ^~~~~~ lib/vsprintf.c:1377:2: warning: Call to function 'memset' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memset_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memset(zerolength, 0, sizeof(zerolength)); ^~~~~~ lib/vsprintf.c:1377:2: note: Call to function 'memset' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memset_s' in case of C11 memset(zerolength, 0, sizeof(zerolength)); ^~~~~~ lib/vsprintf.c:1413:4: warning: Value stored to 'needcolon' is never rea= d [clang-analyzer-deadcode.DeadStores] needcolon =3D false; ^ ~~~~~ lib/vsprintf.c:1413:4: note: Value stored to 'needcolon' is never read needcolon =3D false; ^ ~~~~~ lib/vsprintf.c:1684:9: warning: Call to function 'vsnprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'vsnprintf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] buf +=3D vsnprintf(buf, end > buf ? end - buf : 0, va_fmt->fmt, = va); ^~~~~~~~~ lib/vsprintf.c:1684:9: note: Call to function 'vsnprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'vsnprintf_s' in case of C11 buf +=3D vsnprintf(buf, end > buf ? end - buf : 0, va_fmt->fmt, = va); ^~~~~~~~~ lib/vsprintf.c:1781:2: warning: Call to function 'strcpy' is insecure as= it does not provide bounding of the memory buffer. Replace unbounded copy = functions with analogous functions that support length arguments such as 's= trlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy(p, *fourcc & BIT(31) ? " big-endian" : " little-endian"); ^~~~~~ lib/vsprintf.c:1781:2: note: Call to function 'strcpy' is insecure as it= does not provide bounding of the memory buffer. Replace unbounded copy fun= ctions with analogous functions that support length arguments such as 'strl= cpy'. CWE-119 strcpy(p, *fourcc & BIT(31) ? " big-endian" : " little-endian"); ^~~~~~ lib/vsprintf.c:2757:5: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(str, old_fmt, copy); ^~~~~~ lib/vsprintf.c:2757:5: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(str, old_fmt, copy); ^~~~~~ lib/vsprintf.c:2898:6: warning: Call to function 'vsnprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'vsnprintf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] i =3D vsnprintf(buf, size, fmt, args); ^~~~~~~~~ lib/vsprintf.c:2898:6: note: Call to function 'vsnprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'vsnprintf_s' in case of C11 i =3D vsnprintf(buf, size, fmt, args); ^~~~~~~~~ lib/vsprintf.c:2928:6: warning: Call to function 'vsnprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'vsnprintf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] i =3D vsnprintf(buf, size, fmt, args); ^~~~~~~~~ lib/vsprintf.c:2928:6: note: Call to function 'vsnprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'vsnprintf_s' in case of C11 i =3D vsnprintf(buf, size, fmt, args); ^~~~~~~~~ lib/vsprintf.c:2975:9: warning: Call to function 'vsnprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'vsnprintf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] return vsnprintf(buf, INT_MAX, fmt, args); ^~~~~~~~~ lib/vsprintf.c:2975:9: note: Call to function 'vsnprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'vsnprintf_s' in case of C11 return vsnprintf(buf, INT_MAX, fmt, args); ^~~~~~~~~ lib/vsprintf.c:2997:6: warning: Call to function 'vsnprintf' is insecure= as it does not provide security checks introduced in the C11 standard. Rep= lace with analogous functions that support length arguments or provides bou= ndary checks such as 'vsnprintf_s' in case of C11 [clang-analyzer-security.= insecureAPI.DeprecatedOrUnsafeBufferHandling] i =3D vsnprintf(buf, INT_MAX, fmt, args); ^~~~~~~~~ lib/vsprintf.c:2997:6: note: Call to function 'vsnprintf' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'vsnprintf_s' in case of C11 i =3D vsnprintf(buf, INT_MAX, fmt, args); ^~~~~~~~~ lib/vsprintf.c:3096:5: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(str, save_str, len); ^~~~~~ lib/vsprintf.c:3096:5: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(str, save_str, len); ^~~~~~ lib/vsprintf.c:3232:5: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(str, old_fmt, copy); ^~~~~~ lib/vsprintf.c:3232:5: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(str, old_fmt, copy); ^~~~~~ lib/vsprintf.c:3297:6: warning: Call to function 'memcpy' is insecure as= it does not provide security checks introduced in the C11 standard. Replac= e with analogous functions that support length arguments or provides bounda= ry checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.insecu= reAPI.DeprecatedOrUnsafeBufferHandling] memcpy(str, args, copy); ^~~~~~ lib/vsprintf.c:3297:6: note: Call to function 'memcpy' is insecure as it= does not provide security checks introduced in the C11 standard. Replace w= ith analogous functions that support length arguments or provides boundary = checks such as 'memcpy_s' in case of C11 memcpy(str, args, copy); ^~~~~~ lib/vsprintf.c:3692:6: warning: Call to function 'vsscanf' is insecure a= s it does not provide bounding of the memory buffer or security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'vsscanf_s' in case of = C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] i =3D vsscanf(buf, fmt, args); ^~~~~~~ lib/vsprintf.c:3692:6: note: Call to function 'vsscanf' is insecure as i= t does not provide bounding of the memory buffer or security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'vsscanf_s' in case of C11 i =3D vsscanf(buf, fmt, args); ^~~~~~~ Suppressed 83 warnings (82 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. >> drivers/hwtracing/coresight/coresight-tmc-etf.c:62:3: warning: Call to f= unction 'memcpy' is insecure as it does not provide security checks introdu= ced in the C11 standard. Replace with analogous functions that support leng= th arguments or provides boundary checks such as 'memcpy_s' in case of C11 = [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(bufp, &read_data, 4); ^~~~~~ drivers/hwtracing/coresight/coresight-tmc-etf.c:62:3: note: Call to func= tion 'memcpy' is insecure as it does not provide security checks introduced= in the C11 standard. Replace with analogous functions that support length = arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(bufp, &read_data, 4); ^~~~~~ >> drivers/hwtracing/coresight/coresight-tmc-etf.c:201:3: warning: Call to = function 'memset' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'memset_s' in case of C11= [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(drvdata->buf, 0, drvdata->size); ^~~~~~ drivers/hwtracing/coresight/coresight-tmc-etf.c:201:3: note: Call to fun= ction 'memset' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memset_s' in case of C11 memset(drvdata->buf, 0, drvdata->size); ^~~~~~ drivers/hwtracing/coresight/coresight-tmc-etf.c:666:3: warning: Call to = function 'memset' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'memset_s' in case of C11= [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(drvdata->buf, 0, drvdata->size); ^~~~~~ drivers/hwtracing/coresight/coresight-tmc-etf.c:666:3: note: Call to fun= ction 'memset' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memset_s' in case of C11 memset(drvdata->buf, 0, drvdata->size); ^~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/hwtracing/coresight/coresight-tmc-etr.c:918:2: warning: Called f= unction pointer is null (null dereference) [clang-analyzer-core.CallAndMess= age] etr_buf->ops->free(etr_buf); ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:1425:6: note: Assuming '= etr_buf' is non-null if (!etr_buf) ^~~~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:1425:2: note: Taking fal= se branch if (!etr_buf) ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:1430:2: note: Taking fal= se branch if (!refcount_dec_and_test(&etr_buf->refcount)) { ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:1443:6: note: Assuming '= buf' is null if (buf && WARN_ON(buf !=3D etr_buf)) ^~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:1443:10: note: Left side= of '&&' is false if (buf && WARN_ON(buf !=3D etr_buf)) ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:1446:2: note: Calling 't= mc_free_etr_buf' tmc_free_etr_buf(etr_perf->etr_buf); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:917:10: note: Assuming f= ield 'ops' is non-null WARN_ON(!etr_buf->ops || !etr_buf->ops->free); ^ include/asm-generic/bug.h:121:25: note: expanded from macro 'WARN_ON' int __ret_warn_on =3D !!(condition); = \ ^~~~~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:917:10: note: Left side = of '||' is false WARN_ON(!etr_buf->ops || !etr_buf->ops->free); ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:917:27: note: Assuming f= ield 'free' is null WARN_ON(!etr_buf->ops || !etr_buf->ops->free); ^ include/asm-generic/bug.h:121:25: note: expanded from macro 'WARN_ON' int __ret_warn_on =3D !!(condition); = \ ^~~~~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:917:2: note: Taking true= branch WARN_ON(!etr_buf->ops || !etr_buf->ops->free); ^ include/asm-generic/bug.h:122:2: note: expanded from macro 'WARN_ON' if (unlikely(__ret_warn_on)) \ ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:917:2: note: Loop condit= ion is false. Exiting loop WARN_ON(!etr_buf->ops || !etr_buf->ops->free); ^ include/asm-generic/bug.h:123:3: note: expanded from macro 'WARN_ON' __WARN(); \ ^ include/asm-generic/bug.h:88:19: note: expanded from macro '__WARN' #define __WARN() __WARN_printf(TAINT_WARN, NULL) ^ include/asm-generic/bug.h:90:3: note: expanded from macro '__WARN_printf' instrumentation_begin(); \ ^ include/linux/instrumentation.h:57:34: note: expanded from macro 'instru= mentation_begin' # define instrumentation_begin() do { } while(0) ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:917:2: note: Loop condit= ion is false. Exiting loop WARN_ON(!etr_buf->ops || !etr_buf->ops->free); ^ include/asm-generic/bug.h:123:3: note: expanded from macro 'WARN_ON' __WARN(); \ ^ include/asm-generic/bug.h:88:19: note: expanded from macro '__WARN' #define __WARN() __WARN_printf(TAINT_WARN, NULL) ^ include/asm-generic/bug.h:92:3: note: expanded from macro '__WARN_printf' instrumentation_end(); \ ^ include/linux/instrumentation.h:58:33: note: expanded from macro 'instru= mentation_end' # define instrumentation_end() do { } while(0) ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:917:2: note: Loop condit= ion is false. Exiting loop WARN_ON(!etr_buf->ops || !etr_buf->ops->free); ^ include/asm-generic/bug.h:123:3: note: expanded from macro 'WARN_ON' __WARN(); \ ^ include/asm-generic/bug.h:88:19: note: expanded from macro '__WARN' #define __WARN() __WARN_printf(TAINT_WARN, NULL) ^ include/asm-generic/bug.h:89:38: note: expanded from macro '__WARN_print= f' #define __WARN_printf(taint, arg...) do { \ ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:918:2: note: Called func= tion pointer is null (null dereference) etr_buf->ops->free(etr_buf); -- ^ include/asm-generic/bug.h:146:2: note: expanded from macro 'WARN_ON_ONCE' DO_ONCE_LITE_IF(condition, WARN_ON, 1) ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/once_lite.h:17:16: note: expanded from macro 'DO_ONCE_LITE= _IF' if (unlikely(__ret_do_once && !__already_done)) { \ ^~~~~~~~~~~~~ include/linux/compiler.h:78:42: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:971:6: note: Left side o= f '&&' is false if (WARN_ON_ONCE(status & TMC_STS_MEMERR)) { ^ include/asm-generic/bug.h:146:2: note: expanded from macro 'WARN_ON_ONCE' DO_ONCE_LITE_IF(condition, WARN_ON, 1) ^ include/linux/once_lite.h:17:30: note: expanded from macro 'DO_ONCE_LITE= _IF' if (unlikely(__ret_do_once && !__already_done)) { \ ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:971:6: note: Taking fals= e branch if (WARN_ON_ONCE(status & TMC_STS_MEMERR)) { ^ include/asm-generic/bug.h:146:2: note: expanded from macro 'WARN_ON_ONCE' DO_ONCE_LITE_IF(condition, WARN_ON, 1) ^ include/linux/once_lite.h:17:3: note: expanded from macro 'DO_ONCE_LITE_= IF' if (unlikely(__ret_do_once && !__already_done)) { \ ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:971:2: note: Taking fals= e branch if (WARN_ON_ONCE(status & TMC_STS_MEMERR)) { ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:979:19: note: Assuming t= he condition is false etr_buf->full =3D !!(status & TMC_STS_FULL); ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:981:10: note: Assuming f= ield 'ops' is non-null WARN_ON(!etr_buf->ops || !etr_buf->ops->sync); ^ include/asm-generic/bug.h:121:25: note: expanded from macro 'WARN_ON' int __ret_warn_on =3D !!(condition); = \ ^~~~~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:981:10: note: Left side = of '||' is false WARN_ON(!etr_buf->ops || !etr_buf->ops->sync); ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:981:27: note: Assuming f= ield 'sync' is null WARN_ON(!etr_buf->ops || !etr_buf->ops->sync); ^ include/asm-generic/bug.h:121:25: note: expanded from macro 'WARN_ON' int __ret_warn_on =3D !!(condition); = \ ^~~~~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:981:2: note: Taking true= branch WARN_ON(!etr_buf->ops || !etr_buf->ops->sync); ^ include/asm-generic/bug.h:122:2: note: expanded from macro 'WARN_ON' if (unlikely(__ret_warn_on)) \ ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:981:2: note: Loop condit= ion is false. Exiting loop WARN_ON(!etr_buf->ops || !etr_buf->ops->sync); ^ include/asm-generic/bug.h:123:3: note: expanded from macro 'WARN_ON' __WARN(); \ ^ include/asm-generic/bug.h:88:19: note: expanded from macro '__WARN' #define __WARN() __WARN_printf(TAINT_WARN, NULL) ^ include/asm-generic/bug.h:90:3: note: expanded from macro '__WARN_printf' instrumentation_begin(); \ ^ include/linux/instrumentation.h:57:34: note: expanded from macro 'instru= mentation_begin' # define instrumentation_begin() do { } while(0) ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:981:2: note: Loop condit= ion is false. Exiting loop WARN_ON(!etr_buf->ops || !etr_buf->ops->sync); ^ include/asm-generic/bug.h:123:3: note: expanded from macro 'WARN_ON' __WARN(); \ ^ include/asm-generic/bug.h:88:19: note: expanded from macro '__WARN' #define __WARN() __WARN_printf(TAINT_WARN, NULL) ^ include/asm-generic/bug.h:92:3: note: expanded from macro '__WARN_printf' instrumentation_end(); \ ^ include/linux/instrumentation.h:58:33: note: expanded from macro 'instru= mentation_end' # define instrumentation_end() do { } while(0) ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:981:2: note: Loop condit= ion is false. Exiting loop WARN_ON(!etr_buf->ops || !etr_buf->ops->sync); ^ include/asm-generic/bug.h:123:3: note: expanded from macro 'WARN_ON' __WARN(); \ ^ include/asm-generic/bug.h:88:19: note: expanded from macro '__WARN' #define __WARN() __WARN_printf(TAINT_WARN, NULL) ^ include/asm-generic/bug.h:89:38: note: expanded from macro '__WARN_print= f' #define __WARN_printf(taint, arg...) do { \ ^ drivers/hwtracing/coresight/coresight-tmc-etr.c:983:2: note: Called func= tion pointer is null (null dereference) etr_buf->ops->sync(etr_buf, rrp, rwp); ^~~~~~~~~~~~~~~~~~ >> drivers/hwtracing/coresight/coresight-tmc-etr.c:1488:3: warning: Call to= function 'memcpy' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'memcpy_s' in case of C1= 1 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dst_pages[pg_idx] + pg_offset, src_buf, bytes); ^~~~~~ drivers/hwtracing/coresight/coresight-tmc-etr.c:1488:3: note: Call to fu= nction 'memcpy' is insecure as it does not provide security checks introduc= ed in the C11 standard. Replace with analogous functions that support lengt= h arguments or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(dst_pages[pg_idx] + pg_offset, src_buf, bytes); ^~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. drivers/hwtracing/intel_th/gth.c:157:11: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D snprintf(buf, PAGE_SIZE, "%x\n", port); ^~~~~~~~ drivers/hwtracing/intel_th/gth.c:157:11: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 count =3D snprintf(buf, PAGE_SIZE, "%x\n", port); ^~~~~~~~ drivers/hwtracing/intel_th/gth.c:159:11: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D snprintf(buf, PAGE_SIZE, "disabled\n"); ^~~~~~~~ drivers/hwtracing/intel_th/gth.c:159:11: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 count =3D snprintf(buf, PAGE_SIZE, "disabled\n"); ^~~~~~~~ drivers/hwtracing/intel_th/gth.c:335:10: warning: Call to function 'snpr= intf' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'snprintf_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] count =3D snprintf(buf, PAGE_SIZE, "%x\n", ^~~~~~~~ drivers/hwtracing/intel_th/gth.c:335:10: note: Call to function 'snprint= f' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'snprintf_s' in case of C11 count =3D snprintf(buf, PAGE_SIZE, "%x\n", ^~~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. sound/soc/xtensa/xtfpga-i2s.c:285:11: warning: Value stored to 'channels= ' during its initialization is never read [clang-analyzer-deadcode.DeadStor= es] unsigned channels =3D params_channels(params); ^~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/xtensa/xtfpga-i2s.c:285:11: note: Value stored to 'channels' d= uring its initialization is never read unsigned channels =3D params_channels(params); ^~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (16 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. drivers/remoteproc/remoteproc_virtio.c:111:2: warning: Call to function = 'memset' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memset_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(addr, 0, size); ^~~~~~ drivers/remoteproc/remoteproc_virtio.c:111:2: note: Call to function 'me= mset' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memset_s' in case of C11 memset(addr, 0, size); ^~~~~~ drivers/remoteproc/remoteproc_virtio.c:278:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf, cfg + offset, len); ^~~~~~ drivers/remoteproc/remoteproc_virtio.c:278:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(buf, cfg + offset, len); ^~~~~~ drivers/remoteproc/remoteproc_virtio.c:296:2: warning: Call to function = 'memcpy' is insecure as it does not provide security checks introduced in t= he C11 standard. Replace with analogous functions that support length argum= ents or provides boundary checks such as 'memcpy_s' in case of C11 [clang-a= nalyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(cfg + offset, buf, len); ^~~~~~ drivers/remoteproc/remoteproc_virtio.c:296:2: note: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(cfg + offset, buf, len); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/md/dm-dust.c:358:6: warning: Call to function 'sscanf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[1], "%llu%c", &tmp, &dummy) !=3D 1 || tmp !=3D (= sector_t)tmp) { ^~~~~~ drivers/md/dm-dust.c:358:6: note: Call to function 'sscanf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[1], "%llu%c", &tmp, &dummy) !=3D 1 || tmp !=3D (= sector_t)tmp) { ^~~~~~ drivers/md/dm-dust.c:461:7: warning: Call to function 'sscanf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[1], "%llu%c", &tmp, &dummy) !=3D 1) ^~~~~~ drivers/md/dm-dust.c:461:7: note: Call to function 'sscanf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[1], "%llu%c", &tmp, &dummy) !=3D 1) ^~~~~~ drivers/md/dm-dust.c:481:7: warning: Call to function 'sscanf' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[1], "%llu%c", &tmp, &dummy) !=3D 1) ^~~~~~ drivers/md/dm-dust.c:481:7: note: Call to function 'sscanf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[1], "%llu%c", &tmp, &dummy) !=3D 1) -- drivers/rpmsg/rpmsg_core.c:525:3: note: Call to function 'strncpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'strncpy_s' in case of C11 strncpy(chinfo.name, rpdev->id.name, RPMSG_NAME_SIZE); ^~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. sound/soc/codecs/cs42l42.c:605:8: warning: Excessive padding in 'struct = cs42l42_pll_params' (5 padding bytes, where 1 is optimal). = Optimal fields order: = sclk, = pll_div_frac, = mclk_int, = mclk_src_sel, = sclk_prediv, = pll_div_int, = pll_mode, = pll_divout, = pll_cal_ratio, = n, = consider reordering the fields or adding explicit padding members [clang= -analyzer-optin.performance.Padding] struct cs42l42_pll_params { ~~~~~~~^~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/cs42l42.c:605:8: note: Excessive padding in 'struct cs4= 2l42_pll_params' (5 padding bytes, where 1 is optimal). Optimal fields orde= r: sclk, pll_div_frac, mclk_int, mclk_src_sel, sclk_prediv, pll_div_int, pl= l_mode, pll_divout, pll_cal_ratio, n, consider reordering the fields or add= ing explicit padding members struct cs42l42_pll_params { ~~~~~~~^~~~~~~~~~~~~~~~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 52 warnings generated. sound/soc/codecs/cs43130.c:180:8: warning: Excessive padding in 'struct = cs43130_pll_params' (7 padding bytes, where 3 is optimal). = Optimal fields order: = pll_in, = pll_div_frac, = pll_out, = sclk_prediv, = pll_div_int, = pll_mode, = pll_divout, = pll_cal_ratio, = consider reordering the fields or adding explicit padding members [clang= -analyzer-optin.performance.Padding] struct cs43130_pll_params { ~~~~~~~^~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/cs43130.c:180:8: note: Excessive padding in 'struct cs4= 3130_pll_params' (7 padding bytes, where 3 is optimal). Optimal fields orde= r: pll_in, pll_div_frac, pll_out, sclk_prediv, pll_div_int, pll_mode, pll_d= ivout, pll_cal_ratio, consider reordering the fields or adding explicit pad= ding members struct cs43130_pll_params { ~~~~~~~^~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/cs43130.c:1938:28: warning: Value stored to 'component'= during its initialization is never read [clang-analyzer-deadcode.DeadStore= s] struct snd_soc_component *component =3D cs43130->component; ^~~~~~~~~ ~~~~~~~~~~~~~~~~~~ sound/soc/codecs/cs43130.c:1938:28: note: Value stored to 'component' du= ring its initialization is never read struct snd_soc_component *component =3D cs43130->component; ^~~~~~~~~ ~~~~~~~~~~~~~~~~~~ sound/soc/codecs/cs43130.c:2532:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(all_hp_widgets, digital_hp_widgets, ^~~~~~ sound/soc/codecs/cs43130.c:2532:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(all_hp_widgets, digital_hp_widgets, ^~~~~~ sound/soc/codecs/cs43130.c:2534:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(all_hp_widgets + ARRAY_SIZE(digital_hp_widgets), ^~~~~~ sound/soc/codecs/cs43130.c:2534:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(all_hp_widgets + ARRAY_SIZE(digital_hp_widgets), ^~~~~~ sound/soc/codecs/cs43130.c:2536:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(all_hp_routes, digital_hp_routes, ^~~~~~ sound/soc/codecs/cs43130.c:2536:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(all_hp_routes, digital_hp_routes, ^~~~~~ sound/soc/codecs/cs43130.c:2538:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(all_hp_routes + ARRAY_SIZE(digital_hp_routes), ^~~~~~ sound/soc/codecs/cs43130.c:2538:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(all_hp_routes + ARRAY_SIZE(digital_hp_routes), ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. >> drivers/hwtracing/coresight/coresight-funnel.c:154:9: warning: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C1= 1 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:154:9: note: Call to func= tion 'sprintf' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:197:9: warning: Call to f= unction 'sprintf' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'sprintf_s' in case of C1= 1 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#x\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:197:9: note: Call to func= tion 'sprintf' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%#x\n", val); ^~~~~~~ include/linux/device.h:698:19: warning: Access to field 'driver_data' re= sults in a dereference of a null pointer (loaded from variable 'dev') [clan= g-analyzer-core.NullDereference] dev->driver_data =3D data; ^ drivers/hwtracing/coresight/coresight-funnel.c:373:22: note: Passing val= ue via 1st parameter 'dev' return funnel_probe(&adev->dev, &adev->res); ^~~~~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:373:9: note: Calling 'fun= nel_probe' return funnel_probe(&adev->dev, &adev->res); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:216:34: note: Left side o= f '&&' is false if (is_of_node(dev_fwnode(dev)) && ^ drivers/hwtracing/coresight/coresight-funnel.c:221:6: note: Assuming fie= ld 'name' is non-null if (!desc.name) ^~~~~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:221:2: note: Taking false= branch if (!desc.name) ^ drivers/hwtracing/coresight/coresight-funnel.c:225:6: note: Assuming 'dr= vdata' is non-null if (!drvdata) ^~~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:225:2: note: Taking false= branch if (!drvdata) ^ drivers/hwtracing/coresight/coresight-funnel.c:229:7: note: Calling 'IS_= ERR' if (!IS_ERR(drvdata->atclk)) { ^~~~~~~~~~~~~~~~~~~~~~ include/linux/err.h:36:9: note: Assuming the condition is true return IS_ERR_VALUE((unsigned long)ptr); ^ include/linux/err.h:22:34: note: expanded from macro 'IS_ERR_VALUE' #define IS_ERR_VALUE(x) unlikely((unsigned long)(void *)(x) >=3D (unsign= ed long)-MAX_ERRNO) ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~= ~~~~~~~~~~~~~~~~~ include/linux/compiler.h:78:42: note: expanded from macro 'unlikely' # define unlikely(x) __builtin_expect(!!(x), 0) ^ include/linux/err.h:36:2: note: Returning the value 1, which participate= s in a condition later return IS_ERR_VALUE((unsigned long)ptr); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:229:7: note: Returning fr= om 'IS_ERR' if (!IS_ERR(drvdata->atclk)) { ^~~~~~~~~~~~~~~~~~~~~~ drivers/hwtracing/coresight/coresight-funnel.c:229:2: note: Taking false= branch if (!IS_ERR(drvdata->atclk)) { ^ drivers/hwtracing/coresight/coresight-funnel.c:239:6: note: Assuming 're= s' is null if (res) { ^~~ drivers/hwtracing/coresight/coresight-funnel.c:239:2: note: Taking false= branch if (res) { ^ drivers/hwtracing/coresight/coresight-funnel.c:250:18: note: Passing val= ue via 1st parameter 'dev' dev_set_drvdata(dev, drvdata); ^~~ drivers/hwtracing/coresight/coresight-funnel.c:250:2: note: Calling 'dev= _set_drvdata' dev_set_drvdata(dev, drvdata); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/device.h:698:19: note: Access to field 'driver_data' resul= ts in a dereference of a null pointer (loaded from variable 'dev') dev->driver_data =3D data; ~~~ ^ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. >> sound/soc/codecs/max98390.c:770:4: warning: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(filename, sizeof(filename), ^~~~~~~~ sound/soc/codecs/max98390.c:770:4: note: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 snprintf(filename, sizeof(filename), ^~~~~~~~ >> sound/soc/codecs/max98390.c:773:4: warning: Call to function 'sprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(filename, "dsm_param.bin"); ^~~~~~~ sound/soc/codecs/max98390.c:773:4: note: Call to function 'sprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'sprintf_s' in case of C11 sprintf(filename, "dsm_param.bin"); ^~~~~~~ sound/soc/codecs/max98390.c:776:3: warning: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(filename, sizeof(filename), "%s", ^~~~~~~~ sound/soc/codecs/max98390.c:776:3: note: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 snprintf(filename, sizeof(filename), "%s", ^~~~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (46 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 34 warnings generated. drivers/leds/led-triggers.c:86:7: warning: Call to function 'vsnprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'vsnprintf_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] i =3D vsnprintf(NULL, 0, fmt, args); ^~~~~~~~~ drivers/leds/led-triggers.c:86:7: note: Call to function 'vsnprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'vsnprintf_s' in case of C11 i =3D vsnprintf(NULL, 0, fmt, args); ^~~~~~~~~ drivers/leds/led-triggers.c:279:2: warning: Call to function 'strcpy' is= insecure as it does not provide bounding of the memory buffer. Replace unb= ounded copy functions with analogous functions that support length argument= s such as 'strlcpy'. CWE-119 [clang-analyzer-security.insecureAPI.strcpy] strcpy((char *)trig->name, name); ^~~~~~ drivers/leds/led-triggers.c:279:2: note: Call to function 'strcpy' is in= secure as it does not provide bounding of the memory buffer. Replace unboun= ded copy functions with analogous functions that support length arguments s= uch as 'strlcpy'. CWE-119 strcpy((char *)trig->name, name); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. drivers/leds/leds-bd2802.c:437:9: warning: Call to function 'sprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D sprintf(buf, "on\n"); ^~~~~~~ drivers/leds/leds-bd2802.c:437:9: note: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 ret =3D sprintf(buf, "on\n"); ^~~~~~~ drivers/leds/leds-bd2802.c:439:9: warning: Call to function 'sprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D sprintf(buf, "off\n"); ^~~~~~~ drivers/leds/leds-bd2802.c:439:9: note: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 ret =3D sprintf(buf, "off\n"); ^~~~~~~ drivers/leds/leds-bd2802.c:508:1: warning: Call to function 'sprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] BD2802_CONTROL_ATTR(wave_pattern, "wave_pattern"); ^ drivers/leds/leds-bd2802.c:479:8: note: expanded from macro 'BD2802_CONT= ROL_ATTR' ret =3D sprintf(buf, "0x%02x\n", led->attr_name); = \ ^~~~~~~ drivers/leds/leds-bd2802.c:508:1: note: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 BD2802_CONTROL_ATTR(wave_pattern, "wave_pattern"); ^ drivers/leds/leds-bd2802.c:479:8: note: expanded from macro 'BD2802_CONT= ROL_ATTR' ret =3D sprintf(buf, "0x%02x\n", led->attr_name); = \ ^~~~~~~ drivers/leds/leds-bd2802.c:509:1: warning: Call to function 'sprintf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] BD2802_CONTROL_ATTR(rgb_current, "rgb_current"); ^ drivers/leds/leds-bd2802.c:479:8: note: expanded from macro 'BD2802_CONT= ROL_ATTR' ret =3D sprintf(buf, "0x%02x\n", led->attr_name); = \ ^~~~~~~ drivers/leds/leds-bd2802.c:509:1: note: Call to function 'sprintf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sprintf_s' in case of C11 BD2802_CONTROL_ATTR(rgb_current, "rgb_current"); ^ drivers/leds/leds-bd2802.c:479:8: note: expanded from macro 'BD2802_CONT= ROL_ATTR' ret =3D sprintf(buf, "0x%02x\n", led->attr_name); = \ ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. drivers/iio/industrialio-event.c:542:3: warning: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyze= r-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ev_int->group.attrs, ^~~~~~ drivers/iio/industrialio-event.c:542:3: note: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 memcpy(ev_int->group.attrs, ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. -- drivers/mtd/chips/cfi_cmdset_0001.c:1753:6: note: Taking false branch if (map_word_bitsset(map, status, CMD(0x30))) { ^ include/linux/mtd/map.h:313:3: note: expanded from macro 'map_word_bitss= et' if ((val1).x[i] & (val2).x[i]) { \ ^ drivers/mtd/chips/cfi_cmdset_0001.c:1753:6: note: Loop condition is fals= e. Execution continues on line 1753 if (map_word_bitsset(map, status, CMD(0x30))) { ^ include/linux/mtd/map.h:312:2: note: expanded from macro 'map_word_bitss= et' for (i =3D 0; i < map_words(map); i++) { = \ ^ drivers/mtd/chips/cfi_cmdset_0001.c:1753:2: note: Taking false branch if (map_word_bitsset(map, status, CMD(0x30))) { ^ drivers/mtd/chips/cfi_cmdset_0001.c:1764:6: note: Assuming 'ret' is 0 if (ret) { ^~~ drivers/mtd/chips/cfi_cmdset_0001.c:1764:2: note: Taking false branch if (ret) { ^ drivers/mtd/chips/cfi_cmdset_0001.c:1781:6: note: Assuming 'word_gap' is= not equal to 0 if (!word_gap) { ^~~~~~~~~ drivers/mtd/chips/cfi_cmdset_0001.c:1781:2: note: Taking false branch if (!word_gap) { ^ drivers/mtd/chips/cfi_cmdset_0001.c:1797:7: note: Assuming the condition= is false if (n > vec->iov_len - vec_seek) ^~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/chips/cfi_cmdset_0001.c:1797:3: note: Taking false branch if (n > vec->iov_len - vec_seek) ^ drivers/mtd/chips/cfi_cmdset_0001.c:1799:7: note: Assuming 'n' is <=3D '= len' if (n > len) ^~~~~~~ drivers/mtd/chips/cfi_cmdset_0001.c:1799:3: note: Taking false branch if (n > len) ^ drivers/mtd/chips/cfi_cmdset_0001.c:1802:7: note: Assuming 'word_gap' is= not equal to 0 if (!word_gap && len < map_bankwidth(map)) ^~~~~~~~~ drivers/mtd/chips/cfi_cmdset_0001.c:1802:17: note: Left side of '&&' is = false if (!word_gap && len < map_bankwidth(map)) ^ drivers/mtd/chips/cfi_cmdset_0001.c:1811:7: note: Assuming 'len' is not = equal to 0 if (!len || word_gap =3D=3D map_bankwidth(map)) { ^~~~ drivers/mtd/chips/cfi_cmdset_0001.c:1811:7: note: Left side of '||' is f= alse drivers/mtd/chips/cfi_cmdset_0001.c:1811:15: note: Assuming 'word_gap' i= s not equal to field 'bankwidth' if (!len || word_gap =3D=3D map_bankwidth(map)) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/chips/cfi_cmdset_0001.c:1811:3: note: Taking false branch if (!len || word_gap =3D=3D map_bankwidth(map)) { ^ drivers/mtd/chips/cfi_cmdset_0001.c:1818:7: note: Assuming 'vec_seek' is= equal to field 'iov_len' if (vec_seek =3D=3D vec->iov_len) { ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/mtd/chips/cfi_cmdset_0001.c:1818:3: note: Taking true branch if (vec_seek =3D=3D vec->iov_len) { ^ drivers/mtd/chips/cfi_cmdset_0001.c:1795:2: note: Loop condition is true= . Execution continues on line 1796 do { ^ drivers/mtd/chips/cfi_cmdset_0001.c:1797:24: note: The left operand of '= -' is a garbage value if (n > vec->iov_len - vec_seek) ~~~~~~~~~~~~ ^ Suppressed 20 warnings (20 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 49 warnings generated. drivers/media/v4l2-core/v4l2-fwnode.c:546:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(link, 0, sizeof(*link)); ^~~~~~ drivers/media/v4l2-core/v4l2-fwnode.c:546:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(link, 0, sizeof(*link)); ^~~~~~ drivers/media/v4l2-core/v4l2-fwnode.c:660:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(connector, 0, sizeof(*connector)); ^~~~~~ drivers/media/v4l2-core/v4l2-fwnode.c:660:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(connector, 0, sizeof(*connector)); ^~~~~~ drivers/media/v4l2-core/v4l2-fwnode.c:747:2: warning: Call to function '= memset' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memset_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(props, 0, sizeof(*props)); ^~~~~~ drivers/media/v4l2-core/v4l2-fwnode.c:747:2: note: Call to function 'mem= set' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memset_s' in case of C11 memset(props, 0, sizeof(*props)); ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/media/v4l2-core/v4l2-async.c:447:17: warning: Value stored to 'd= ev' during its initialization is never read [clang-analyzer-deadcode.DeadSt= ores] struct device *dev =3D ^~~ drivers/media/v4l2-core/v4l2-async.c:447:17: note: Value stored to 'dev'= during its initialization is never read struct device *dev =3D ^~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. >> sound/soc/codecs/rt5682-sdw.c:669:2: warning: Call to function 'memcpy' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-s= ecurity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&rt5682->params, params, sizeof(*params)); ^~~~~~ sound/soc/codecs/rt5682-sdw.c:669:2: note: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 memcpy(&rt5682->params, params, sizeof(*params)); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 35 warnings generated. sound/soc/codecs/rt711.c:95:2: warning: Value stored to 'dev' is never r= ead [clang-analyzer-deadcode.DeadStores] dev =3D regmap_get_device(regmap); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/rt711.c:95:2: note: Value stored to 'dev' is never read dev =3D regmap_get_device(regmap); ^ ~~~~~~~~~~~~~~~~~~~~~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. sound/soc/codecs/rt711-sdw.c:409:2: warning: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-se= curity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&rt711->params, params, sizeof(*params)); ^~~~~~ sound/soc/codecs/rt711-sdw.c:409:2: note: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 memcpy(&rt711->params, params, sizeof(*params)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 50 warnings generated. sound/soc/codecs/sigmadsp.c:146:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ctrl->cache, data, ctrl->num_bytes); ^~~~~~ sound/soc/codecs/sigmadsp.c:146:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(ctrl->cache, data, ctrl->num_bytes); ^~~~~~ sound/soc/codecs/sigmadsp.c:173:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ucontrol->value.bytes.data, ctrl->cache, ^~~~~~ sound/soc/codecs/sigmadsp.c:173:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(ucontrol->value.bytes.data, ctrl->cache, ^~~~~~ sound/soc/codecs/sigmadsp.c:235:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(name, ctrl_chunk->name, name_len); ^~~~~~ sound/soc/codecs/sigmadsp.c:235:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(name, ctrl_chunk->name, name_len); ^~~~~~ sound/soc/codecs/sigmadsp.c:282:2: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data->data, data_chunk->data, length); ^~~~~~ sound/soc/codecs/sigmadsp.c:282:2: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(data->data, data_chunk->data, length); ^~~~~~ sound/soc/codecs/sigmadsp.c:424:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(data->data, sa->payload, data->length); ^~~~~~ sound/soc/codecs/sigmadsp.c:424:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(data->data, sa->payload, data->length); ^~~~~~ sound/soc/codecs/sigmadsp.c:649:2: warning: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&template, 0, sizeof(template)); ^~~~~~ sound/soc/codecs/sigmadsp.c:649:2: note: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 memset(&template, 0, sizeof(template)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 87 warnings generated. drivers/nvme/host/core.c:629:2: warning: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(nvme_req(req)->cmd, cmd, sizeof(*cmd)); ^~~~~~ drivers/nvme/host/core.c:629:2: note: Call to function 'memcpy' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memcpy_s' in case of C11 memcpy(nvme_req(req)->cmd, cmd, sizeof(*cmd)); ^~~~~~ drivers/nvme/host/core.c:746:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(s, 0, sizeof(*s)); ^~~~~~ drivers/nvme/host/core.c:746:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(s, 0, sizeof(*s)); ^~~~~~ drivers/nvme/host/core.c:819:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmnd, 0, sizeof(*cmnd)); ^~~~~~ drivers/nvme/host/core.c:819:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(cmnd, 0, sizeof(*cmnd)); ^~~~~~ drivers/nvme/host/core.c:871:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmnd, 0, sizeof(*cmnd)); ^~~~~~ drivers/nvme/host/core.c:871:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(cmnd, 0, sizeof(*cmnd)); ^~~~~~ drivers/nvme/host/core.c:888:2: warning: Call to function 'memset' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memset_s' in case of C11 [clang-analyzer-securi= ty.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(cmnd, 0, sizeof(*cmnd)); ^~~~~~ drivers/nvme/host/core.c:888:2: note: Call to function 'memset' is insec= ure as it does not provide security checks introduced in the C11 standard. = Replace with analogous functions that support length arguments or provides = boundary checks such as 'memset_s' in case of C11 memset(cmnd, 0, sizeof(*cmnd)); ^~~~~~ drivers/nvme/host/core.c:1365:3: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ids->eui64, data + sizeof(*cur), NVME_NIDT_EUI64_= LEN); -- sound/soc/codecs/adau1701.c:748:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) { ^~~~~~~ sound/soc/codecs/adau1701.c:748:2: note: Taking false branch if (ret < 0) { ^ sound/soc/codecs/adau1701.c:753:9: note: Calling 'adau1701_reset' return adau1701_reset(component, adau1701->pll_clkdiv, 0); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/adau1701.c:309:6: note: Assuming the condition is true if (clkdiv !=3D ADAU1707_CLKDIV_UNSET && adau1701->gpio_pll_mode= ) { ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/adau1701.c:309:6: note: Left side of '&&' is true sound/soc/codecs/adau1701.c:309:41: note: Assuming field 'gpio_pll_mode'= is non-null if (clkdiv !=3D ADAU1707_CLKDIV_UNSET && adau1701->gpio_pll_mode= ) { ^~~~~~~~~~~~~~~~~~~~~~~ sound/soc/codecs/adau1701.c:309:2: note: Taking true branch if (clkdiv !=3D ADAU1707_CLKDIV_UNSET && adau1701->gpio_pll_mode= ) { ^ sound/soc/codecs/adau1701.c:310:3: note: Control jumps to 'case 256:' a= t line 315 switch (clkdiv) { ^ sound/soc/codecs/adau1701.c:316:4: note: Calling '__assign_bit' __assign_bit(0, values, 0); ^~~~~~~~~~~~~~~~~~~~~~~~~~ include/linux/bitops.h:217:6: note: 'value' is false if (value) ^~~~~ include/linux/bitops.h:217:2: note: Taking false branch if (value) ^ include/linux/bitops.h:220:3: note: Calling 'arch___clear_bit' __clear_bit(nr, addr); ^ include/asm-generic/bitops/non-atomic.h:34:21: note: expanded from macro= '__clear_bit' #define __clear_bit arch___clear_bit ^ include/asm-generic/bitops/non-atomic.h:32:5: note: The left expression = of the compound assignment is an uninitialized value. The computed value wi= ll also be garbage *p &=3D ~mask; ~~ ^ sound/soc/codecs/adau1701.c:276:3: warning: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf + 3, bytes + i * 4, 4); ^~~~~~ sound/soc/codecs/adau1701.c:276:3: note: Call to function 'memcpy' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'memcpy_s' in case of C11 memcpy(buf + 3, bytes + i * 4, 4); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 48 warnings generated. sound/soc/codecs/wm8741.c:561:4: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&wm8741->pdata, pdata, sizeof(wm8741->pda= ta)); ^~~~~~ sound/soc/codecs/wm8741.c:561:4: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(&wm8741->pdata, pdata, sizeof(wm8741->pda= ta)); ^~~~~~ Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. sound/soc/codecs/wm8903.c:434:3: warning: Value stored to 'best' is neve= r read [clang-analyzer-deadcode.DeadStores] best =3D 0; ^ ~ sound/soc/codecs/wm8903.c:434:3: note: Value stored to 'best' is never r= ead best =3D 0; ^ ~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. drivers/soundwire/debugfs.c:22:2: warning: Call to function 'snprintf' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(name, sizeof(name), "master-%d-%d", bus->id, bus->link_= id); ^~~~~~~~ drivers/soundwire/debugfs.c:22:2: note: Call to function 'snprintf' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'snprintf_s' in case of C11 snprintf(name, sizeof(name), "master-%d-%d", bus->id, bus->link_= id); ^~~~~~~~ drivers/soundwire/debugfs.c:130:2: warning: Call to function 'snprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'snprintf_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] snprintf(name, sizeof(name), "%s", dev_name(&slave->dev)); ^~~~~~~~ drivers/soundwire/debugfs.c:130:2: note: Call to function 'snprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'snprintf_s' in case of C11 snprintf(name, sizeof(name), "%s", dev_name(&slave->dev)); ^~~~~~~~ Suppressed 31 warnings (31 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 40 warnings generated. >> drivers/soundwire/qcom.c:1160:4: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(bp_mode, SWR_INVALID_PARAM, QCOM_SDW_MAX_= PORTS); ^~~~~~ drivers/soundwire/qcom.c:1160:4: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(bp_mode, SWR_INVALID_PARAM, QCOM_SDW_MAX_= PORTS); ^~~~~~ drivers/soundwire/qcom.c:1165:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(hstart, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1165:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(hstart, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1168:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(hstop, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1168:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(hstop, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1171:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(word_length, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1171:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(word_length, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1174:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(blk_group_count, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1174:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(blk_group_count, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1177:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(lane_control, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ drivers/soundwire/qcom.c:1177:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(lane_control, SWR_INVALID_PARAM, QCOM_SDW_MAX_PORTS); ^~~~~~ Suppressed 34 warnings (34 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/md/dm-clone-metadata.c:304:2: warning: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(sb->uuid, 0, sizeof(sb->uuid)); ^~~~~~ drivers/md/dm-clone-metadata.c:304:2: note: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 memset(sb->uuid, 0, sizeof(sb->uuid)); ^~~~~~ drivers/md/dm-clone-metadata.c:310:2: warning: Call to function 'memcpy'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&sb->metadata_space_map_root, &cmd->metadata_space_map_ro= ot, ^~~~~~ drivers/md/dm-clone-metadata.c:310:2: note: Call to function 'memcpy' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memcpy_s' in case of C11 memcpy(&sb->metadata_space_map_root, &cmd->metadata_space_map_ro= ot, ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 85 warnings generated. drivers/md/dm-integrity.c:679:4: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] clear_page(data); ^ arch/arm/include/asm/page-nommu.h:11:26: note: expanded from macro 'clea= r_page' #define clear_page(page) memset((page), 0, PAGE_SIZE) ^~~~~~ drivers/md/dm-integrity.c:679:4: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 clear_page(data); ^ arch/arm/include/asm/page-nommu.h:11:26: note: expanded from macro 'clea= r_page' #define clear_page(page) memset((page), 0, PAGE_SIZE) ^~~~~~ drivers/md/dm-integrity.c:712:3: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] copy_page(dst_data, src_data); ^ arch/arm/include/asm/page-nommu.h:12:28: note: expanded from macro 'copy= _page' #define copy_page(to,from) memcpy((to), (from), PAGE_SIZE) ^~~~~~ drivers/md/dm-integrity.c:712:3: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 copy_page(dst_data, src_data); ^ arch/arm/include/asm/page-nommu.h:12:28: note: expanded from macro 'copy= _page' #define copy_page(to,from) memcpy((to), (from), PAGE_SIZE) ^~~~~~ drivers/md/dm-integrity.c:847:3: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(result + size, 0, JOURNAL_MAC_SIZE - size); ^~~~~~ drivers/md/dm-integrity.c:847:3: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(result + size, 0, JOURNAL_MAC_SIZE - size); ^~~~~~ drivers/md/dm-integrity.c:860:3: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(result, digest, JOURNAL_MAC_SIZE); ^~~~~~ drivers/md/dm-integrity.c:860:3: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(result, digest, JOURNAL_MAC_SIZE); ^~~~~~ drivers/md/dm-integrity.c:865:2: warning: Call to function 'memset' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(result, 0, JOURNAL_MAC_SIZE); ^~~~~~ drivers/md/dm-integrity.c:865:2: note: Call to function 'memset' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memset_s' in case of C11 memset(result, 0, JOURNAL_MAC_SIZE); ^~~~~~ drivers/md/dm-integrity.c:882:4: warning: Call to function 'memcpy' is i= nsecure as it does not provide security checks introduced in the C11 standa= rd. Replace with analogous functions that support length arguments or provi= des boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secur= ity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&js->mac, result + (j * JOURNAL_MAC_PER_S= ECTOR), JOURNAL_MAC_PER_SECTOR); ^~~~~~ drivers/md/dm-integrity.c:882:4: note: Call to function 'memcpy' is inse= cure as it does not provide security checks introduced in the C11 standard.= Replace with analogous functions that support length arguments or provides= boundary checks such as 'memcpy_s' in case of C11 memcpy(&js->mac, result + (j * JOURNAL_MAC_PER_S= ECTOR), JOURNAL_MAC_PER_SECTOR); -- ^~~~~~ drivers/md/dm-integrity.c:3798:5: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] clear_page(va); ^ arch/arm/include/asm/page-nommu.h:11:26: note: expanded from macro 'clea= r_page' #define clear_page(page) memset((page), 0, PAGE_SIZE) ^~~~~~ drivers/md/dm-integrity.c:3798:5: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 clear_page(va); ^ arch/arm/include/asm/page-nommu.h:11:26: note: expanded from macro 'clea= r_page' #define clear_page(page) memset((page), 0, PAGE_SIZE) ^~~~~~ drivers/md/dm-integrity.c:3868:5: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(crypt_iv, 0x00, ivsize); ^~~~~~ drivers/md/dm-integrity.c:3868:5: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(crypt_iv, 0x00, ivsize); ^~~~~~ drivers/md/dm-integrity.c:3869:5: warning: Call to function 'memset' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(crypt_data, 0x00, crypt_len); ^~~~~~ drivers/md/dm-integrity.c:3869:5: note: Call to function 'memset' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memset_s' in case of C11 memset(crypt_data, 0x00, crypt_len); ^~~~~~ drivers/md/dm-integrity.c:3870:5: warning: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(crypt_data, §ion_le, min((siz= e_t)crypt_len, sizeof(section_le))); ^~~~~~ drivers/md/dm-integrity.c:3870:5: note: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 memcpy(crypt_data, §ion_le, min((siz= e_t)crypt_len, sizeof(section_le))); ^~~~~~ drivers/md/dm-integrity.c:3899:5: warning: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(section_req->iv + ivsize, crypt_d= ata, ivsize); ^~~~~~ drivers/md/dm-integrity.c:3899:5: note: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 memcpy(section_req->iv + ivsize, crypt_d= ata, ivsize); ^~~~~~ drivers/md/dm-integrity.c:4012:6: warning: Call to function 'sscanf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[1], "%llu%c", &start, &dummy) !=3D 1 || start != =3D (sector_t)start) { ^~~~~~ drivers/md/dm-integrity.c:4012:6: note: Call to function 'sscanf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[1], "%llu%c", &start, &dummy) !=3D 1 || start != =3D (sector_t)start) { ^~~~~~ drivers/md/dm-integrity.c:4020:7: warning: Call to function 'sscanf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(argv[2], "%u%c", &ic->tag_size, &dummy) !=3D = 1 || !ic->tag_size) { ^~~~~~ drivers/md/dm-integrity.c:4020:7: note: Call to function 'sscanf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sscanf_s' in case of C11 if (sscanf(argv[2], "%u%c", &ic->tag_size, &dummy) !=3D = 1 || !ic->tag_size) { ^~~~~~ drivers/md/dm-integrity.c:4059:7: warning: Call to function 'sscanf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(opt_string, "journal_sectors:%u%c", &val, &du= mmy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4059:7: note: Call to function 'sscanf' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'sscanf_s' in case of C11 if (sscanf(opt_string, "journal_sectors:%u%c", &val, &du= mmy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4061:12: warning: Call to function 'sscanf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] else if (sscanf(opt_string, "interleave_sectors:%u%c", &= val, &dummy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4061:12: note: Call to function 'sscanf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sscanf_s' in case of C11 else if (sscanf(opt_string, "interleave_sectors:%u%c", &= val, &dummy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4063:12: warning: Call to function 'sscanf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] else if (sscanf(opt_string, "buffer_sectors:%u%c", &val,= &dummy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4063:12: note: Call to function 'sscanf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sscanf_s' in case of C11 else if (sscanf(opt_string, "buffer_sectors:%u%c", &val,= &dummy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4065:12: warning: Call to function 'sscanf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] else if (sscanf(opt_string, "journal_watermark:%u%c", &v= al, &dummy) =3D=3D 1 && val <=3D 100) ^~~~~~ drivers/md/dm-integrity.c:4065:12: note: Call to function 'sscanf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sscanf_s' in case of C11 else if (sscanf(opt_string, "journal_watermark:%u%c", &v= al, &dummy) =3D=3D 1 && val <=3D 100) ^~~~~~ drivers/md/dm-integrity.c:4067:12: warning: Call to function 'sscanf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] else if (sscanf(opt_string, "commit_time:%u%c", &val, &d= ummy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4067:12: note: Call to function 'sscanf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sscanf_s' in case of C11 else if (sscanf(opt_string, "commit_time:%u%c", &val, &d= ummy) =3D=3D 1) ^~~~~~ drivers/md/dm-integrity.c:4080:14: warning: Call to function 'sscanf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] } else if (sscanf(opt_string, "block_size:%u%c", &val, &= dummy) =3D=3D 1) { ^~~~~~ drivers/md/dm-integrity.c:4080:14: note: Call to function 'sscanf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sscanf_s' in case of C11 } else if (sscanf(opt_string, "block_size:%u%c", &val, &= dummy) =3D=3D 1) { ^~~~~~ drivers/md/dm-integrity.c:4089:14: warning: Call to function 'sscanf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] } else if (sscanf(opt_string, "sectors_per_bit:%llu%c", = &llval, &dummy) =3D=3D 1) { ^~~~~~ drivers/md/dm-integrity.c:4089:14: note: Call to function 'sscanf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sscanf_s' in case of C11 } else if (sscanf(opt_string, "sectors_per_bit:%llu%c", = &llval, &dummy) =3D=3D 1) { ^~~~~~ drivers/md/dm-integrity.c:4091:14: warning: Call to function 'sscanf' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'sscanf_s' in case of C11 [clang-analyzer-sec= urity.insecureAPI.DeprecatedOrUnsafeBufferHandling] } else if (sscanf(opt_string, "bitmap_flush_interval:%u%= c", &val, &dummy) =3D=3D 1) { ^~~~~~ drivers/md/dm-integrity.c:4091:14: note: Call to function 'sscanf' is in= secure as it does not provide security checks introduced in the C11 standar= d. Replace with analogous functions that support length arguments or provid= es boundary checks such as 'sscanf_s' in case of C11 } else if (sscanf(opt_string, "bitmap_flush_interval:%u%= c", &val, &dummy) =3D=3D 1) { ^~~~~~ Suppressed 46 warnings (45 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/hwtracing/coresight/coresight-etm3x-core.c:316:2: warning: Call = to function 'memset' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'memset_s' in case of = C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(config, 0, sizeof(struct etm_config)); ^~~~~~ drivers/hwtracing/coresight/coresight-etm3x-core.c:316:2: note: Call to = function 'memset' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'memset_s' in case of C11 memset(config, 0, sizeof(struct etm_config)); ^~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 80 warnings generated. >> drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:20:9: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:20:9: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:30:9: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:30:9: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:41:9: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:41:9: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:61:9: warning: Call = to function 'sprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:61:9: note: Call to = function 'sprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ >> drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:80:3: warning: Call = to function 'memset' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'memset_s' in case of = C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(config, 0, sizeof(struct etm_config)); ^~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:80:3: note: Call to = function 'memset' is insecure as it does not provide security checks introd= uced in the C11 standard. Replace with analogous functions that support len= gth arguments or provides boundary checks such as 'memset_s' in case of C11 memset(config, 0, sizeof(struct etm_config)); ^~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:103:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:103:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:188:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:188:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:218:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:218:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:248:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:248:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:278:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:278:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:328:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:328:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:387:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx %#lx\n", val1, val2); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:387:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx %#lx\n", val1, val2); ^~~~~~~ >> drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:399:6: warning: Call= to function 'sscanf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sscanf_s' in case of= C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] if (sscanf(buf, "%lx %lx", &val1, &val2) !=3D 2) ^~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:399:6: note: Call to= function 'sscanf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sscanf_s' in case of C11 if (sscanf(buf, "%lx %lx", &val1, &val2) !=3D 2) ^~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:449:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:449:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:503:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:503:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:549:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:549:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:581:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:581:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:622:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:622:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:657:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:657:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:692:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:692:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:727:11: warning: Cal= l to function 'sprintf' is insecure as it does not provide security checks = introduced in the C11 standard. Replace with analogous functions that suppo= rt length arguments or provides boundary checks such as 'sprintf_s' in case= of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandli= ng] ret +=3D sprintf(buf, "counter %d: %x\n", ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:727:11: note: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 ret +=3D sprintf(buf, "counter %d: %x\n", ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:735:10: warning: Cal= l to function 'sprintf' is insecure as it does not provide security checks = introduced in the C11 standard. Replace with analogous functions that suppo= rt length arguments or provides boundary checks such as 'sprintf_s' in case= of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandli= ng] ret +=3D sprintf(buf, "counter %d: %x\n", i, val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:735:10: note: Call t= o function 'sprintf' is insecure as it does not provide security checks int= roduced in the C11 standard. Replace with analogous functions that support = length arguments or provides boundary checks such as 'sprintf_s' in case of= C11 ret +=3D sprintf(buf, "counter %d: %x\n", i, val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:770:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:770:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:799:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:799:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:828:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:828:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:857:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:857:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:886:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:886:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:915:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:915:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:958:9: warning: Call= to function 'sprintf' is insecure as it does not provide security checks i= ntroduced in the C11 standard. Replace with analogous functions that suppor= t length arguments or provides boundary checks such as 'sprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] return sprintf(buf, "%#lx\n", val); ^~~~~~~ drivers/hwtracing/coresight/coresight-etm3x-sysfs.c:958:9: note: Call to= function 'sprintf' is insecure as it does not provide security checks intr= oduced in the C11 standard. Replace with analogous functions that support l= ength arguments or provides boundary checks such as 'sprintf_s' in case of = C11 return sprintf(buf, "%#lx\n", val); -- scan.chan =3D res; ^ ~~~ drivers/iio/adc/ti-ads1015.c:401:17: note: 'res' declared without an ini= tial value int chan, ret, res; ^~~ drivers/iio/adc/ti-ads1015.c:408:8: note: Calling 'ads1015_get_adc_resul= t' ret =3D ads1015_get_adc_result(data, chan, &res); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/ti-ads1015.c:350:6: note: Assuming 'chan' is >=3D 0 if (chan < 0 || chan >=3D ADS1015_CHANNELS) ^~~~~~~~ drivers/iio/adc/ti-ads1015.c:350:6: note: Left side of '||' is false drivers/iio/adc/ti-ads1015.c:350:18: note: Assuming 'chan' is < ADS1015_= CHANNELS if (chan < 0 || chan >=3D ADS1015_CHANNELS) ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/ti-ads1015.c:350:2: note: Taking false branch if (chan < 0 || chan >=3D ADS1015_CHANNELS) ^ drivers/iio/adc/ti-ads1015.c:354:6: note: Assuming 'ret' is not equal to= 0 if (ret) ^~~ drivers/iio/adc/ti-ads1015.c:354:2: note: Taking true branch if (ret) ^ drivers/iio/adc/ti-ads1015.c:355:3: note: Returning without writing to '= *val' return ret; ^ drivers/iio/adc/ti-ads1015.c:408:8: note: Returning from 'ads1015_get_ad= c_result' ret =3D ads1015_get_adc_result(data, chan, &res); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/iio/adc/ti-ads1015.c:409:6: note: Assuming 'ret' is >=3D 0 if (ret < 0) { ^~~~~~~ drivers/iio/adc/ti-ads1015.c:409:2: note: Taking false branch if (ret < 0) { ^ drivers/iio/adc/ti-ads1015.c:414:12: note: Assigned value is garbage or = undefined scan.chan =3D res; ^ ~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/iio/proximity/vcnl3020.c:76:8: warning: Excessive padding in 'st= ruct vcnl3020_data' (61 padding bytes, where 29 is optimal). = Optimal fields order: = buf, = rev, = regmap, = dev, = lock, = consider reordering the fields or adding explicit padding members [clang= -analyzer-optin.performance.Padding] struct vcnl3020_data { ~~~~~~~^~~~~~~~~~~~~~~ drivers/iio/proximity/vcnl3020.c:76:8: note: Excessive padding in 'struc= t vcnl3020_data' (61 padding bytes, where 29 is optimal). Optimal fields or= der: buf, rev, regmap, dev, lock, consider reordering the fields or adding = explicit padding members struct vcnl3020_data { ~~~~~~~^~~~~~~~~~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/iio/temperature/tsys01.c:141:9: warning: Call to function 'sprin= tf' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'sprintf_s' in case of C11 [clang-analy= zer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] ret =3D sprintf(ptr, "0x%04x ", dev_data->prom[i]); ^~~~~~~ drivers/iio/temperature/tsys01.c:141:9: note: Call to function 'sprintf'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'sprintf_s' in case of C11 ret =3D sprintf(ptr, "0x%04x ", dev_data->prom[i]); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/dvb-frontends/mn88472.c:659:2: warning: Call to function '= memcpy' is insecure as it does not provide security checks introduced in th= e C11 standard. Replace with analogous functions that support length argume= nts or provides boundary checks such as 'memcpy_s' in case of C11 [clang-an= alyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&dev->fe.ops, &mn88472_ops, sizeof(struct dvb_frontend_op= s)); ^~~~~~ drivers/media/dvb-frontends/mn88472.c:659:2: note: Call to function 'mem= cpy' is insecure as it does not provide security checks introduced in the C= 11 standard. Replace with analogous functions that support length arguments= or provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&dev->fe.ops, &mn88472_ops, sizeof(struct dvb_frontend_op= s)); ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. >> drivers/media/dvb-frontends/ec100.c:285:2: warning: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->config, config, sizeof(struct ec100_config)); ^~~~~~ drivers/media/dvb-frontends/ec100.c:285:2: note: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->config, config, sizeof(struct ec100_config)); ^~~~~~ drivers/media/dvb-frontends/ec100.c:293:2: warning: Call to function 'me= mcpy' is insecure as it does not provide security checks introduced in the = C11 standard. Replace with analogous functions that support length argument= s or provides boundary checks such as 'memcpy_s' in case of C11 [clang-anal= yzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(&state->frontend.ops, &ec100_ops, ^~~~~~ drivers/media/dvb-frontends/ec100.c:293:2: note: Call to function 'memcp= y' is insecure as it does not provide security checks introduced in the C11= standard. Replace with analogous functions that support length arguments o= r provides boundary checks such as 'memcpy_s' in case of C11 memcpy(&state->frontend.ops, &ec100_ops, ^~~~~~ Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 17 warnings generated. Suppressed 17 warnings (17 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/iio/pressure/mpl3115.c:170:2: warning: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(buffer, 0, sizeof(buffer)); ^~~~~~ drivers/iio/pressure/mpl3115.c:170:2: note: Call to function 'memset' is= insecure as it does not provide security checks introduced in the C11 stan= dard. Replace with analogous functions that support length arguments or pro= vides boundary checks such as 'memset_s' in case of C11 memset(buffer, 0, sizeof(buffer)); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/iio/light/vcnl4000.c:734:9: warning: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%u\n", data->near_level); ^~~~~~~ drivers/iio/light/vcnl4000.c:734:9: note: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 return sprintf(buf, "%u\n", data->near_level); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. drivers/iio/magnetometer/ak8974.c:477:3: warning: Call to function 'mems= et' is insecure as it does not provide security checks introduced in the C1= 1 standard. Replace with analogous functions that support length arguments = or provides boundary checks such as 'memset_s' in case of C11 [clang-analyz= er-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(tab, 0xFF, tab_size); ^~~~~~ drivers/iio/magnetometer/ak8974.c:477:3: note: Call to function 'memset'= is insecure as it does not provide security checks introduced in the C11 s= tandard. Replace with analogous functions that support length arguments or = provides boundary checks such as 'memset_s' in case of C11 memset(tab, 0xFF, tab_size); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (44 in non-user code, 1 with check filters). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 45 warnings generated. Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. -- Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 32 warnings generated. Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. Suppressed 47 warnings (47 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. sound/soc/codecs/cx2072x.c:503:2: warning: Call to function 'memcpy' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-secu= rity.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(buf + 2, val, val_count); ^~~~~~ sound/soc/codecs/cx2072x.c:503:2: note: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 memcpy(buf + 2, val, val_count); ^~~~~~ Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. sound/soc/codecs/da7213.c:1427:3: warning: Value stored to 'indiv' is ne= ver read [clang-analyzer-deadcode.DeadStores] indiv =3D DA7213_PLL_INDIV_9_TO_18_MHZ_VAL; ^ sound/soc/codecs/da7213.c:1427:3: note: Value stored to 'indiv' is never= read Suppressed 46 warnings (46 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 33 warnings generated. sound/soc/codecs/dmic.c:162:4: warning: Call to function 'memcpy' is ins= ecure as it does not provide security checks introduced in the C11 standard= . Replace with analogous functions that support length arguments or provide= s boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-securit= y.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(dai_drv, &dmic_dai, sizeof(*dai_drv)); ^~~~~~ sound/soc/codecs/dmic.c:162:4: note: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 memcpy(dai_drv, &dmic_dai, sizeof(*dai_drv)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/iio/light/cm32181.c:400:10: warning: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] len +=3D sprintf(buf + len, "0.%06u ", cm32181->als_it_v= alues[i]); ^~~~~~~ drivers/iio/light/cm32181.c:400:10: note: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 len +=3D sprintf(buf + len, "0.%06u ", cm32181->als_it_v= alues[i]); ^~~~~~~ drivers/iio/light/cm32181.c:401:15: warning: Call to function 'sprintf' = is insecure as it does not provide security checks introduced in the C11 st= andard. Replace with analogous functions that support length arguments or p= rovides boundary checks such as 'sprintf_s' in case of C11 [clang-analyzer-= security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return len + sprintf(buf + len, "\n"); ^~~~~~~ drivers/iio/light/cm32181.c:401:15: note: Call to function 'sprintf' is = insecure as it does not provide security checks introduced in the C11 stand= ard. Replace with analogous functions that support length arguments or prov= ides boundary checks such as 'sprintf_s' in case of C11 return len + sprintf(buf + len, "\n"); ^~~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 44 warnings generated. Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 10 warnings generated. lib/xarray.c:2029:18: warning: Value stored to 'node' during its initial= ization is never read [clang-analyzer-deadcode.DeadStores] struct xa_node *node =3D xas->xa_node; ^~~~ ~~~~~~~~~~~~ lib/xarray.c:2029:18: note: Value stored to 'node' during its initializa= tion is never read struct xa_node *node =3D xas->xa_node; ^~~~ ~~~~~~~~~~~~ Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/hwtracing/coresight/coresight-cpu-debug.c:514:2: warning: Call t= o function 'snprintf' is insecure as it does not provide security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'snprintf_s' in case = of C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandlin= g] snprintf(buf, sizeof(buf), "%d\n", debug_enable); ^~~~~~~~ drivers/hwtracing/coresight/coresight-cpu-debug.c:514:2: note: Call to f= unction 'snprintf' is insecure as it does not provide security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'snprintf_s' in case of = C11 snprintf(buf, sizeof(buf), "%d\n", debug_enable); ^~~~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. >> drivers/hwtracing/coresight/coresight-catu.c:232:4: warning: Call to fun= ction 'memset' is insecure as it does not provide security checks introduce= d in the C11 standard. Replace with analogous functions that support length= arguments or provides boundary checks such as 'memset_s' in case of C11 [c= lang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(&table_ptr[i], 0, ^~~~~~ drivers/hwtracing/coresight/coresight-catu.c:232:4: note: Call to functi= on 'memset' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memset_s' in case of C11 memset(&table_ptr[i], 0, ^~~~~~ Suppressed 45 warnings (45 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 9 warnings generated. Suppressed 9 warnings (9 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 11 warnings generated. Suppressed 11 warnings (11 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 37 warnings generated. drivers/of/address.c:89:2: warning: Call to function 'memset' is insecur= e as it does not provide security checks introduced in the C11 standard. Re= place with analogous functions that support length arguments or provides bo= undary checks such as 'memset_s' in case of C11 [clang-analyzer-security.in= secureAPI.DeprecatedOrUnsafeBufferHandling] memset(addr, 0, na * 4); ^~~~~~ drivers/of/address.c:89:2: note: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 memset(addr, 0, na * 4); ^~~~~~ drivers/of/address.c:430:3: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(addr, 0, pna * 4); ^~~~~~ drivers/of/address.c:430:3: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(addr, 0, pna * 4); ^~~~~~ drivers/of/address.c:449:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(addr, ranges + na, 4 * pna); ^~~~~~ drivers/of/address.c:449:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(addr, ranges + na, 4 * pna); ^~~~~~ drivers/of/address.c:502:2: warning: Call to function 'memcpy' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memcpy_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(addr, in_addr, na * 4); ^~~~~~ drivers/of/address.c:502:2: note: Call to function 'memcpy' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memcpy_s' in case of C11 memcpy(addr, in_addr, na * 4); ^~~~~~ drivers/of/address.c:820:2: warning: Call to function 'memset' is insecu= re as it does not provide security checks introduced in the C11 standard. R= eplace with analogous functions that support length arguments or provides b= oundary checks such as 'memset_s' in case of C11 [clang-analyzer-security.i= nsecureAPI.DeprecatedOrUnsafeBufferHandling] memset(r, 0, sizeof(struct resource)); ^~~~~~ drivers/of/address.c:820:2: note: Call to function 'memset' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'memset_s' in case of C11 memset(r, 0, sizeof(struct resource)); ^~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 47 warnings generated. drivers/md/dm-snap-persistent.c:294:2: warning: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ps->area, 0, ps->store->chunk_size << SECTOR_SHIFT); ^~~~~~ drivers/md/dm-snap-persistent.c:294:2: note: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 memset(ps->area, 0, ps->store->chunk_size << SECTOR_SHIFT); ^~~~~~ drivers/md/dm-snap-persistent.c:385:2: warning: Call to function 'memset= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memset_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(ps->header_area, 0, ps->store->chunk_size << SECTOR_SHIFT= ); ^~~~~~ drivers/md/dm-snap-persistent.c:385:2: note: Call to function 'memset' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memset_s' in case of C11 memset(ps->header_area, 0, ps->store->chunk_size << SECTOR_SHIFT= ); ^~~~~~ drivers/md/dm-snap-persistent.c:541:4: warning: Call to function 'memcpy= ' is insecure as it does not provide security checks introduced in the C11 = standard. Replace with analogous functions that support length arguments or= provides boundary checks such as 'memcpy_s' in case of C11 [clang-analyzer= -security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memcpy(ps->area, area, ps->store->chunk_size << = SECTOR_SHIFT); ^~~~~~ drivers/md/dm-snap-persistent.c:541:4: note: Call to function 'memcpy' i= s insecure as it does not provide security checks introduced in the C11 sta= ndard. Replace with analogous functions that support length arguments or pr= ovides boundary checks such as 'memcpy_s' in case of C11 memcpy(ps->area, area, ps->store->chunk_size << = SECTOR_SHIFT); ^~~~~~ Suppressed 44 warnings (44 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 36 warnings generated. sound/core/pcm.c:673:3: warning: Call to function 'sprintf' is insecure = as it does not provide security checks introduced in the C11 standard. Repl= ace with analogous functions that support length arguments or provides boun= dary checks such as 'sprintf_s' in case of C11 [clang-analyzer-security.ins= ecureAPI.DeprecatedOrUnsafeBufferHandling] sprintf(substream->name, "subdevice #%i", idx); ^~~~~~~ sound/core/pcm.c:673:3: note: Call to function 'sprintf' is insecure as = it does not provide security checks introduced in the C11 standard. Replace= with analogous functions that support length arguments or provides boundar= y checks such as 'sprintf_s' in case of C11 sprintf(substream->name, "subdevice #%i", idx); ^~~~~~~ sound/core/pcm.c:956:2: warning: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 [clang-analyzer-security.insec= ureAPI.DeprecatedOrUnsafeBufferHandling] memset(runtime->status, 0, size); ^~~~~~ sound/core/pcm.c:956:2: note: Call to function 'memset' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'memset_s' in case of C11 memset(runtime->status, 0, size); ^~~~~~ sound/core/pcm.c:966:2: warning: Call to function 'memset' is insecure a= s it does not provide security checks introduced in the C11 standard. Repla= ce with analogous functions that support length arguments or provides bound= ary checks such as 'memset_s' in case of C11 [clang-analyzer-security.insec= ureAPI.DeprecatedOrUnsafeBufferHandling] memset(runtime->control, 0, size); ^~~~~~ sound/core/pcm.c:966:2: note: Call to function 'memset' is insecure as i= t does not provide security checks introduced in the C11 standard. Replace = with analogous functions that support length arguments or provides boundary= checks such as 'memset_s' in case of C11 memset(runtime->control, 0, size); ^~~~~~ sound/core/pcm.c:1028:9: warning: Call to function 'sprintf' is insecure= as it does not provide bounding of the memory buffer or security checks in= troduced in the C11 standard. Replace with analogous functions that support= length arguments or provides boundary checks such as 'sprintf_s' in case o= f C11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] return sprintf(buf, "%s\n", str); ^~~~~~~ sound/core/pcm.c:1028:9: note: Call to function 'sprintf' is insecure as= it does not provide bounding of the memory buffer or security checks intro= duced in the C11 standard. Replace with analogous functions that support le= ngth arguments or provides boundary checks such as 'sprintf_s' in case of C= 11 return sprintf(buf, "%s\n", str); ^~~~~~~ Suppressed 32 warnings (32 in non-user code). Use -header-filter=3D.* to display errors from all non-system headers. U= se -system-headers to display errors from system headers as well. 46 warnings generated. drivers/media/v4l2-core/v4l2-dv-timings.c:175:2: warning: Call to functi= on 'memset' is insecure as it does not provide security checks introduced i= n the C11 standard. Replace with analogous functions that support length ar= guments or provides boundary checks such as 'memset_s' in case of C11 [clan= g-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling] memset(t->reserved, 0, sizeof(t->reserved)); vim +106 fs/squashfs/file_direct.c 0d455c12c64286 Phillip Lougher 2013-11-13 20 = 0d455c12c64286 Phillip Lougher 2013-11-13 21 static int squashfs_read= _cache(struct page *target_page, u64 block, int bsize, a3f94cb99a854f Phillip Lougher 2018-08-02 22 int pages, struct page = **page, int bytes); 0d455c12c64286 Phillip Lougher 2013-11-13 23 = 0d455c12c64286 Phillip Lougher 2013-11-13 24 /* Read separately compr= essed datablock directly into page cache */ a3f94cb99a854f Phillip Lougher 2018-08-02 25 int squashfs_readpage_bl= ock(struct page *target_page, u64 block, int bsize, a3f94cb99a854f Phillip Lougher 2018-08-02 26 int expected) 0d455c12c64286 Phillip Lougher 2013-11-13 27 = 0d455c12c64286 Phillip Lougher 2013-11-13 28 { 0d455c12c64286 Phillip Lougher 2013-11-13 29 struct inode *inode =3D= target_page->mapping->host; 0d455c12c64286 Phillip Lougher 2013-11-13 30 struct squashfs_sb_info= *msblk =3D inode->i_sb->s_fs_info; 0d455c12c64286 Phillip Lougher 2013-11-13 31 = 09cbfeaf1a5a67 Kirill A. Shutemov 2016-04-01 32 int file_end =3D (i_siz= e_read(inode) - 1) >> PAGE_SHIFT; 09cbfeaf1a5a67 Kirill A. Shutemov 2016-04-01 33 int mask =3D (1 << (msb= lk->block_log - PAGE_SHIFT)) - 1; 0d455c12c64286 Phillip Lougher 2013-11-13 34 int start_index =3D tar= get_page->index & ~mask; 0d455c12c64286 Phillip Lougher 2013-11-13 35 int end_index =3D start= _index | mask; 0d455c12c64286 Phillip Lougher 2013-11-13 36 int i, n, pages, missin= g_pages, bytes, res =3D -ENOMEM; 0d455c12c64286 Phillip Lougher 2013-11-13 37 struct page **page; 0d455c12c64286 Phillip Lougher 2013-11-13 38 struct squashfs_page_ac= tor *actor; 0d455c12c64286 Phillip Lougher 2013-11-13 39 void *pageaddr; 0d455c12c64286 Phillip Lougher 2013-11-13 40 = 0d455c12c64286 Phillip Lougher 2013-11-13 41 if (end_index > file_en= d) 0d455c12c64286 Phillip Lougher 2013-11-13 42 end_index =3D file_end; 0d455c12c64286 Phillip Lougher 2013-11-13 43 = 0d455c12c64286 Phillip Lougher 2013-11-13 44 pages =3D end_index - s= tart_index + 1; 0d455c12c64286 Phillip Lougher 2013-11-13 45 = 14694888db2c1f Fabian Frederick 2014-08-06 46 page =3D kmalloc_array(= pages, sizeof(void *), GFP_KERNEL); 0d455c12c64286 Phillip Lougher 2013-11-13 47 if (page =3D=3D NULL) 0d455c12c64286 Phillip Lougher 2013-11-13 48 return res; 0d455c12c64286 Phillip Lougher 2013-11-13 49 = 0d455c12c64286 Phillip Lougher 2013-11-13 50 /* 0d455c12c64286 Phillip Lougher 2013-11-13 51 * Create a "page actor= " which will kmap and kunmap the 0d455c12c64286 Phillip Lougher 2013-11-13 52 * page cache pages app= ropriately within the decompressor 0d455c12c64286 Phillip Lougher 2013-11-13 53 */ 0d455c12c64286 Phillip Lougher 2013-11-13 54 actor =3D squashfs_page= _actor_init_special(page, pages, 0); 0d455c12c64286 Phillip Lougher 2013-11-13 55 if (actor =3D=3D NULL) 0d455c12c64286 Phillip Lougher 2013-11-13 56 goto out; 0d455c12c64286 Phillip Lougher 2013-11-13 57 = 0d455c12c64286 Phillip Lougher 2013-11-13 58 /* Try to grab all the = pages covered by the Squashfs block */ 0d455c12c64286 Phillip Lougher 2013-11-13 59 for (missing_pages =3D = 0, i =3D 0, n =3D start_index; i < pages; i++, n++) { 0d455c12c64286 Phillip Lougher 2013-11-13 60 page[i] =3D (n =3D=3D = target_page->index) ? target_page : 0d455c12c64286 Phillip Lougher 2013-11-13 61 grab_cache_page_nowai= t(target_page->mapping, n); 0d455c12c64286 Phillip Lougher 2013-11-13 62 = 0d455c12c64286 Phillip Lougher 2013-11-13 63 if (page[i] =3D=3D NUL= L) { 0d455c12c64286 Phillip Lougher 2013-11-13 64 missing_pages++; 0d455c12c64286 Phillip Lougher 2013-11-13 65 continue; 0d455c12c64286 Phillip Lougher 2013-11-13 66 } 0d455c12c64286 Phillip Lougher 2013-11-13 67 = 0d455c12c64286 Phillip Lougher 2013-11-13 68 if (PageUptodate(page[= i])) { 0d455c12c64286 Phillip Lougher 2013-11-13 69 unlock_page(page[i]); 09cbfeaf1a5a67 Kirill A. Shutemov 2016-04-01 70 put_page(page[i]); 0d455c12c64286 Phillip Lougher 2013-11-13 71 page[i] =3D NULL; 0d455c12c64286 Phillip Lougher 2013-11-13 72 missing_pages++; 0d455c12c64286 Phillip Lougher 2013-11-13 73 } 0d455c12c64286 Phillip Lougher 2013-11-13 74 } 0d455c12c64286 Phillip Lougher 2013-11-13 75 = 0d455c12c64286 Phillip Lougher 2013-11-13 76 if (missing_pages) { 0d455c12c64286 Phillip Lougher 2013-11-13 77 /* 0d455c12c64286 Phillip Lougher 2013-11-13 78 * Couldn't get one or= more pages, this page has either 0d455c12c64286 Phillip Lougher 2013-11-13 79 * been VM reclaimed, = but others are still in the page cache 0d455c12c64286 Phillip Lougher 2013-11-13 80 * and uptodate, or we= 're racing with another thread in 0d455c12c64286 Phillip Lougher 2013-11-13 81 * squashfs_readpage a= lso trying to grab them. Fall back to 0d455c12c64286 Phillip Lougher 2013-11-13 82 * using an intermedia= te buffer. 0d455c12c64286 Phillip Lougher 2013-11-13 83 */ 0d455c12c64286 Phillip Lougher 2013-11-13 84 res =3D squashfs_read_= cache(target_page, block, bsize, pages, a3f94cb99a854f Phillip Lougher 2018-08-02 85 page, expected); 6d565409503f4e Phillip Lougher 2013-11-24 86 if (res < 0) 6d565409503f4e Phillip Lougher 2013-11-24 87 goto mark_errored; 6d565409503f4e Phillip Lougher 2013-11-24 88 = 0d455c12c64286 Phillip Lougher 2013-11-13 89 goto out; 0d455c12c64286 Phillip Lougher 2013-11-13 90 } 0d455c12c64286 Phillip Lougher 2013-11-13 91 = 0d455c12c64286 Phillip Lougher 2013-11-13 92 /* Decompress directly = into the page cache buffers */ 0d455c12c64286 Phillip Lougher 2013-11-13 93 res =3D squashfs_read_d= ata(inode->i_sb, block, bsize, NULL, actor); 0d455c12c64286 Phillip Lougher 2013-11-13 94 if (res < 0) 0d455c12c64286 Phillip Lougher 2013-11-13 95 goto mark_errored; 0d455c12c64286 Phillip Lougher 2013-11-13 96 = a3f94cb99a854f Phillip Lougher 2018-08-02 97 if (res !=3D expected) { a3f94cb99a854f Phillip Lougher 2018-08-02 98 res =3D -EIO; a3f94cb99a854f Phillip Lougher 2018-08-02 99 goto mark_errored; a3f94cb99a854f Phillip Lougher 2018-08-02 100 } a3f94cb99a854f Phillip Lougher 2018-08-02 101 = 0d455c12c64286 Phillip Lougher 2013-11-13 102 /* Last page may have t= railing bytes not filled */ 09cbfeaf1a5a67 Kirill A. Shutemov 2016-04-01 103 bytes =3D res % PAGE_SI= ZE; 0d455c12c64286 Phillip Lougher 2013-11-13 104 if (bytes) { 0d455c12c64286 Phillip Lougher 2013-11-13 105 pageaddr =3D kmap_atom= ic(page[pages - 1]); 09cbfeaf1a5a67 Kirill A. Shutemov 2016-04-01 @106 memset(pageaddr + byte= s, 0, PAGE_SIZE - bytes); 0d455c12c64286 Phillip Lougher 2013-11-13 107 kunmap_atomic(pageaddr= ); 0d455c12c64286 Phillip Lougher 2013-11-13 108 } 0d455c12c64286 Phillip Lougher 2013-11-13 109 = 0d455c12c64286 Phillip Lougher 2013-11-13 110 /* Mark pages as uptoda= te, unlock and release */ 0d455c12c64286 Phillip Lougher 2013-11-13 111 for (i =3D 0; i < pages= ; i++) { 0d455c12c64286 Phillip Lougher 2013-11-13 112 flush_dcache_page(page= [i]); 0d455c12c64286 Phillip Lougher 2013-11-13 113 SetPageUptodate(page[i= ]); 0d455c12c64286 Phillip Lougher 2013-11-13 114 unlock_page(page[i]); 0d455c12c64286 Phillip Lougher 2013-11-13 115 if (page[i] !=3D targe= t_page) 09cbfeaf1a5a67 Kirill A. Shutemov 2016-04-01 116 put_page(page[i]); 0d455c12c64286 Phillip Lougher 2013-11-13 117 } 0d455c12c64286 Phillip Lougher 2013-11-13 118 = 0d455c12c64286 Phillip Lougher 2013-11-13 119 kfree(actor); 0d455c12c64286 Phillip Lougher 2013-11-13 120 kfree(page); 0d455c12c64286 Phillip Lougher 2013-11-13 121 = 0d455c12c64286 Phillip Lougher 2013-11-13 122 return 0; 0d455c12c64286 Phillip Lougher 2013-11-13 123 = 0d455c12c64286 Phillip Lougher 2013-11-13 124 mark_errored: 0d455c12c64286 Phillip Lougher 2013-11-13 125 /* Decompression failed= , mark pages as errored. Target_page is 0d455c12c64286 Phillip Lougher 2013-11-13 126 * dealt with by the ca= ller 0d455c12c64286 Phillip Lougher 2013-11-13 127 */ 0d455c12c64286 Phillip Lougher 2013-11-13 128 for (i =3D 0; i < pages= ; i++) { 6d565409503f4e Phillip Lougher 2013-11-24 129 if (page[i] =3D=3D NUL= L || page[i] =3D=3D target_page) 0d455c12c64286 Phillip Lougher 2013-11-13 130 continue; 0d455c12c64286 Phillip Lougher 2013-11-13 131 flush_dcache_page(page= [i]); 0d455c12c64286 Phillip Lougher 2013-11-13 132 SetPageError(page[i]); 0d455c12c64286 Phillip Lougher 2013-11-13 133 unlock_page(page[i]); 09cbfeaf1a5a67 Kirill A. Shutemov 2016-04-01 134 put_page(page[i]); 0d455c12c64286 Phillip Lougher 2013-11-13 135 } 0d455c12c64286 Phillip Lougher 2013-11-13 136 = 0d455c12c64286 Phillip Lougher 2013-11-13 137 out: 0d455c12c64286 Phillip Lougher 2013-11-13 138 kfree(actor); 0d455c12c64286 Phillip Lougher 2013-11-13 139 kfree(page); 0d455c12c64286 Phillip Lougher 2013-11-13 140 return res; 0d455c12c64286 Phillip Lougher 2013-11-13 141 } 0d455c12c64286 Phillip Lougher 2013-11-13 142 = --- 0-DAY CI Kernel Test Service, Intel Corporation https://lists.01.org/hyperkitty/list/kbuild-all@lists.01.org --===============8880891029560657691==--