Luca Boccassi cda2962daf compress: add assert for space doubling overflow safety ...

Coverity flags 2 * space as a potential overflow. The space value
is bounded by prior allocation success, but add an explicit assert
to document this for static analyzers.

CID#1548056

Follow-up for 5e592c66bd

2026-03-28 20:13:03 +00:00

..

ac-power

ac-power: use the new option parser

2026-03-25 00:45:57 +01:00

analyze

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

ask-password

ask-password: use the new option parser

2026-03-25 02:02:22 +01:00

backlight

tree-wide: extend verbs functions with extra per-verb data parameter

2026-03-18 10:28:47 +00:00

basic

compress: add assert for space doubling overflow safety

2026-03-28 20:13:03 +00:00

battery-check

…

binfmt

binfmt: use the new option parser

2026-03-25 00:45:57 +01:00

bless-boot

bless-boot: use the new option parser and verb macros

2026-03-25 02:03:55 +01:00

boot

boot: add overflow check in GPT parser

2026-03-28 19:56:31 +00:00

bootctl

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

busctl

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

cgls

…

cgtop

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

core

core: address review feedback from Mike (#41354)

2026-03-26 18:18:01 +01:00

coredump

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

coverage

…

creds

creds: minor tweak for fputc() error handling

2026-03-26 16:01:35 +01:00

cryptenroll

meson: use libfido2_cflags dependency

2026-03-12 16:02:28 +00:00

cryptsetup

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

debug-generator

debug-generator: use unsigned bit shift for breakpoint flags

2026-03-28 19:56:31 +00:00

delta

…

detect-virt

…

dissect

Apply the same column width for different option groups

2026-03-23 14:20:10 +01:00

environment-d-generator

…

escape

…

factory-reset

tree-wide: extend verbs functions with extra per-verb data parameter

2026-03-18 10:28:47 +00:00

firstboot

firstboot: permit setting the static hostname via a system credential

2026-03-20 12:39:44 +01:00

fsck

…

fstab-generator

core: introduce ConditionSecurity=measured-os

2026-03-26 16:11:34 +01:00

fundamental

fundamental: move strv_isempty() into src/fundamental/

2026-03-27 09:54:28 +01:00

fuzz

fuzz: fix typo

2026-03-11 03:23:53 +09:00

getty-generator

…

gpt-auto-generator

core: introduce ConditionSecurity=measured-os

2026-03-26 16:11:34 +01:00

growfs

various: fix typos

2026-03-25 02:03:56 +01:00

hibernate-resume

core: introduce ConditionSecurity=measured-os

2026-03-26 16:11:34 +01:00

home

homectl: apply all --member-of= groups from a comma-separated list

2026-03-25 10:41:06 +01:00

hostname

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

hwdb

tree-wide: extend verbs functions with extra per-verb data parameter

2026-03-18 10:28:47 +00:00

id128

Apply the same column width for different option groups

2026-03-23 14:20:10 +01:00

imds

imdsd: voidify unchecked call

2026-03-28 19:56:30 +00:00

import

importd: add assert for log_message_size accumulation bounds

2026-03-28 20:10:14 +00:00

include

mips: Fix conditional inclusion of <asm/sgidefs.h>

2026-03-22 20:02:13 +01:00

integritysetup

integritysetup: regularize conversion of integrity alg.

2026-03-20 17:12:29 +01:00

journal

journalctl-filter: drop doubled newline

2026-03-05 01:01:33 +01:00

journal-remote

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

kernel-install

kernel-install(uki): filter comments from cmdline

2026-03-26 14:28:22 +01:00

keyutil

tree-wide: extend verbs functions with extra per-verb data parameter

2026-03-18 10:28:47 +00:00

libc

…

libsystemd

sd-bus: add asserts for rbuffer_size accumulation bounds

2026-03-28 20:09:40 +00:00

libsystemd-network

libsystemd-network: make check-pointer-deref clean

2026-03-27 11:23:40 +01:00

libudev

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

locale

Rename verb functions for consistency and add per-verb constant parameter (#41003)

2026-03-18 16:46:13 +01:00

login

shutdown: remove kexec-tools dependency

2026-03-27 23:03:01 +01:00

machine

machine: never ever allow non-root-owned host machine

2026-03-27 11:47:42 +01:00

machine-id-setup

…

measure

sd-json: when parsing optionally insist top-level variant is object or array

2026-03-20 15:34:56 +01:00

modules-load

…

mount

mount: honor --timeout-idle-sec=SEC option (#41010)

2026-03-10 04:31:53 +09:00

mountfsd

mountfsd: fix readOnly flag inversion

2026-03-23 00:54:51 +00:00

mstack

…

mute-console

…

network

network: add unmanaged interface checks to Link.Renew and Link.ForceRenew Varlink methods

2026-03-19 11:50:45 +00:00

notify

notify: add one more compiler suppression

2026-03-23 14:20:10 +01:00

nspawn

nspawn: normalize pivot_root paths

2026-03-12 00:24:01 +00:00

nsresourced

nsresourced: fix BPF loading when using kernel compiled with Clang

2026-03-20 15:27:08 +01:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

…

nss-systemd

nss-systemd: make check-pointer-deref clean

2026-03-27 11:24:49 +01:00

oom

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

path

…

pcrextend

pcrextend: measure another separator at boot

2026-03-26 16:11:34 +01:00

pcrlock

pcrextend: measure another separator at boot

2026-03-26 16:11:34 +01:00

portable

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

pstore

…

ptyfwd

…

quotacheck

…

random-seed

…

remount-fs

…

repart

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

reply-password

…

report

report: use verb function argument

2026-03-18 10:28:47 +00:00

resolve

resolved: fix TOCTOU in hook discovery

2026-03-28 19:56:31 +00:00

rfkill

…

rpm

systemctl: rename enqueue-marked-jobs to enqueue-marked

2026-03-03 15:26:45 +01:00

run

…

run-generator

…

sbsign

tree-wide: extend verbs functions with extra per-verb data parameter

2026-03-18 10:28:47 +00:00

shared

cpu-set-util: add asserts to guide static analysis after realloc

2026-03-28 19:56:31 +00:00

shutdown

shutdown: remove kexec-tools dependency

2026-03-27 23:03:01 +01:00

sleep

…

socket-activate

…

socket-proxy

shared: extract socket_forward_new() helper from socket-proxyd

2026-03-20 10:13:34 +01:00

ssh-generator

ssh-proxy: return an error if user supplies VMADDR_CID_ANY

2026-03-20 11:37:31 -04:00

stdio-bridge

…

storagetm

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

sulogin-shell

…

sysctl

…

sysext

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

system-update-generator

…

systemctl

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

systemd

sd-dhcp-client: coding style fix

2026-03-22 03:34:43 +09:00

sysupdate

sysupdate: add more input validation

2026-03-28 09:15:33 +01:00

sysusers

sysusers: disallow --cat-config with --inline

2026-03-16 23:05:59 +01:00

test

imds: add new systemd-imdsd.service that makes IMDS data accessible locally

2026-03-26 10:54:15 +01:00

timedate

tree-wide: extend verbs functions with extra per-verb data parameter

2026-03-18 10:28:47 +00:00

timesync

timesyncd: drop obsolete privilege dropping code

2026-03-20 09:57:55 +01:00

tmpfiles

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

tpm2-setup

tree-wide: relax TPM available checks for many cases

2026-03-26 16:11:34 +01:00

tty-ask-password-agent

…

udev

scsi_id: use strscpy instead of strncpy for wwn fields

2026-03-28 19:56:31 +00:00

ukify

ukify: default --hwids to /usr/lib/systemd/boot/hwids/<EFI_ARCH>/

2026-02-25 13:51:31 +00:00

update-done

update-done: use the new option parser

2026-03-25 02:02:23 +01:00

update-utmp

tree-wide: extend verbs functions with extra per-verb data parameter

2026-03-18 10:28:47 +00:00

user-sessions

…

userdb

sd-json: when parsing optionally insist top-level variant is object or array

2026-03-20 15:34:56 +01:00

validatefs

validatefs: shorten and reindent code

2026-03-25 02:02:24 +01:00

varlinkctl

sd-json: when parsing optionally insist top-level variant is object or array

2026-03-20 15:34:56 +01:00

vconsole

vconsole-setup: handle gracefully if setfont/loadkeys are not available

2026-03-19 08:51:18 +01:00

veritysetup

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00

version

…

vmspawn

vmspawn: improve firmware selection to match mkosi's implementation

2026-03-27 14:22:29 +01:00

volatile-root

…

vpick

…

xdg-autostart-generator

coccinelle: add checks for pointer access without NULL check

2026-03-26 18:13:17 +01:00