Fix a potential resource leak for the variable "salt".

The sleep time was extended to ensure the service was up.

A scan-build script is used for passing the parameters to scan-build
command.

Ignore unix.StdCLibraryFunctions and unix.Stream warnings.

- A new NHI for REMBRANDT.
- CI fixes.
- Don't install an empty DB directory.
- Fixed: Determine the string length before writing file.
- Fixed: Free on error to prevent resource leak.

Max Gautier authored Mar 09, 2024 and Kate Hsuan committed May 09, 2024

StateDirectory accomplishes the same thing. Moreover, BOLT_DBDIR is
never accessed on systemd>=240 (and debian 10 is on systemd 241) since
the only occurrence in the code is in bolt_get_store_path
(boltd/bolt-config.c) and is unreachable if the STATE_DIRECTORY
environment variable is defined.

Max Gautier authored Mar 08, 2024 and Kate Hsuan committed May 09, 2024

It will be created on boltd startup by systemd instead.

Max Gautier authored Mar 08, 2024 and Kate Hsuan committed May 09, 2024

Removes the corresponding conf.set_quoted in meson.build

The data should free() to prevent resource leak (CWE-772) when the
error occurs.

Signed-off-by: Kate Hsuan <hpa@redhat.com>

The string length should be determined before calling the write
function.

Signed-off-by: Kate Hsuan <hpa@redhat.com>

Fix CWE-190. It was possible to casue a overflow.

Signed-off-by: Kate Hsuan <hpa@redhat.com>

Replace the deprecated parameter with a new one.

Guilhem Lettron authored Apr 19, 2024 and Kate Hsuan committed Apr 29, 2024

Add REMBRANDT_NHI.

Signed-off-by: Guilhem Lettron <guilhem@barpilot.io>

Replaced string with a boolean value for boolean variables.

Remove error return since the kernel set authorized attribute to
invisible when nopcie and dpolny are reported from the system.

Link: #187


Signed-off-by: Kate Hsuan <hpa@redhat.com>

The test cases for nopcie level.

Signed-off-by: Kate Hsuan <hpa@redhat.com>

The status is Athorized for "nopcie" level.

Link: #187


Signed-off-by: Kate Hsuan <hpa@redhat.com>

Include the "nopcie" security level.

https://www.kernel.org/doc/html/latest/admin-guide/thunderbolt.html
nopcie: PCIe tunneling is disabled/forbidden from the BIOS.
Available in some USB4 systems.

#187


Signed-off-by: Kate Hsuan <hpa@redhat.com>

Signed-off-by: Kate Hsuan <hpa@redhat.com>

Fix uninitialized variables.

Signed-off-by: Kate Hsuan <hpa@redhat.com>

The error log is shown as a "blob data" since a random pointer of a string
was placed in log message. The domain syspath should be printed when domain
fails to be created.

Link: #187

gboolean g_once_init_enter (void* location)
While location has a volatile qualifier, this is a historical artifact
and the pointer passed to g_once_init_enter() should not be volatile.

fix mismatch data type

Updated podman network and DNS settings to make sure the Coverity
tests can be delivered.

Signed-off-by: Kate Hsuan <hpa@redhat.com>