1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
/* This pseudo-C file is uploaded to Coverity for modeling. */
/* from ptp2 */
typedef unsigned short uint16_t;
typedef unsigned int uint32_t;
typedef unsigned long long uint64_t;
typedef void *PTPParams;
typedef void *PTPContainer;
uint16_t htod16p (PTPParams *params, uint16_t var) { __coverity_tainted_data_return__(); }
uint16_t dtoh16p (PTPParams *params, uint16_t var) { __coverity_tainted_data_return__(); }
uint16_t htole16(uint16_t var) { __coverity_tainted_data_return__(); }
uint16_t htobe16(uint16_t var) { __coverity_tainted_data_return__(); }
void htod16ap (PTPParams *params, unsigned char *a, uint16_t val) { __coverity_tainted_data_argument__(a); }
void dtoh16ap (PTPParams *params, unsigned char *a, uint16_t val) { __coverity_tainted_data_argument__(a); }
uint32_t htod32p (PTPParams *params, uint32_t var) { __coverity_tainted_data_return__(); }
uint32_t dtoh32p (PTPParams *params, uint32_t var) { __coverity_tainted_data_return__(); }
uint32_t htole32 (uint32_t var) { __coverity_tainted_data_return__(); }
uint32_t htobe32 (uint32_t var) { __coverity_tainted_data_return__(); }
void htod32ap (PTPParams *params, unsigned char *a, uint32_t val) { __coverity_tainted_data_argument__(a); }
void dtoh32ap (PTPParams *params, unsigned char *a, uint32_t val) { __coverity_tainted_data_argument__(a); }
uint64_t dtoh64p (PTPParams *params, uint64_t var) { __coverity_tainted_data_return__(); }
uint64_t htod64p (PTPParams *params, uint64_t var) { __coverity_tainted_data_return__(); }
void htod64ap (PTPParams *params, unsigned char *a, uint64_t val) { __coverity_tainted_data_argument__(a); }
void dtoh64ap (PTPParams *params, unsigned char *a, uint64_t val) { __coverity_tainted_data_argument__(a); }
/* gphoto port reading from devices */
typedef void *GPPort;
int gp_port_read (GPPort *port, char *data, int size) {
__coverity_tainted_data_argument__(data);
}
int gp_port_usb_msg_read (GPPort *port, int request, int value, int index, char *bytes, int size) {
__coverity_tainted_data_argument__(bytes);
}
int gp_port_usb_msg_interface_read (GPPort *port, int request, int value, int index, char *bytes, int size) {
__coverity_tainted_data_argument__(bytes);
}
int gp_port_usb_msg_class_read (GPPort *port, int request, int value, int index, char *bytes, int size) {
__coverity_tainted_data_argument__(bytes);
}
int gp_port_send_scsi_cmd (GPPort *port, int to_dev,
char *cmd, int cmd_size,
char *sense, int sense_size,
char *data, int data_size) {
if (!to_dev) {
__coverity_tainted_data_argument__(data);
__coverity_tainted_data_argument__(sense);
}
}
void gp_log_data (const char *domain, const char *data, unsigned int size, const char* format, ...) {
/* considered a tainted sink ... but is not one. */
}
uint16_t
ptp_transaction (PTPParams* params, PTPContainer* ptp,
uint16_t flags, uint64_t sendlen,
unsigned char **data, unsigned int *recvlen) {
if ((flags & 0xff) == 0x2) {
__coverity_tainted_data_argument__(data);
__coverity_tainted_data_argument__(recvlen);
}
}
|
