Ping-Ke Shih <pkshih@xxxxxxxxxxx> wrote:
> The firmware->size is validated before using firmware->data, but Coverity
> still reports:
> Downcasting "firmware->data" from "u8 const *" to "struct rtw89_mfw_hdr"
> implies that the data that this pointer points to is tainted."
>
> Using &firmware->data[0] to avoid the warning. No change logic at all.
>
> Addresses-Coverity-ID: 1494046 ("Untrusted loop bound")
> Addresses-Coverity-ID: 1544385 ("Untrusted array index read")
>
> Signed-off-by: Ping-Ke Shih <pkshih@xxxxxxxxxxx>
1 patch(es) applied to rtw-next branch of rtw.git, thanks.
bc1265b5c982 wifi: rtw89: fw: cast mfw_hdr pointer from address of zeroth byte of firmware->data
---
https://github.com/pkshih/rtw.git
