Read-only mirror of https://review.coreboot.org/coreboot.git. Synced every hour. We don't handle Pull Requests.
This report summarizes scanner evidence for coreboot/coreboot, a C project with 2,807 GitHub stars. SynthScan examined 3,201,974 lines of code across 15779 source files, recording 24176 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 6.6 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 23966 finding(s).
Are imports declared and package/API names verified? 48 finding(s).
Are wrappers, guards, and repeated structures necessary? 168 finding(s).
Which changes need focused human review? 24176 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 24176 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Documentation/gcov.txt | 81 | +# define __GCOV_KERNEL__ | COMMENT |
| LOW | Documentation/drivers/acpi_fan_control.md | 281 | #define FAN1_THRESHOLD_ON 65 | COMMENT |
| LOW | …hnotes/2015-11-rebuilding-coreboot-image-generation.md | 161 | region IFD: 0 4K | COMMENT |
| LOW | …hnotes/2015-11-rebuilding-coreboot-image-generation.md | 201 | # math expressions are wrapped with ( ), | COMMENT |
| LOW | …hnotes/2015-11-rebuilding-coreboot-image-generation.md | 221 | # also, start is given as “the end of VBLOCK_A” | COMMENT |
| LOW | Documentation/security/vboot/index.md | 221 | the firmware signing key and the signature for the *FW_MAIN* firmware. | COMMENT |
| LOW | Documentation/security/vboot/index.md | 241 | # src/mainboard/intel/galileo/vboot.fmd. | COMMENT |
| LOW | Documentation/security/vboot/index.md | 261 | # | COMMENT |
| LOW | Documentation/internals/devicetree_language.md | 41 | # | Domain/Setting | SA | IA | GT Unsliced | GT | | COMMENT |
| LOW | Documentation/mainboard/clevo/n130wu/index.md | 41 | ### Working | COMMENT |
| LOW | Documentation/lib/fw_config.md | 281 | field mask and the option value. | COMMENT |
| LOW | util/ectool/ectool.c | 1 | /* SPDX-License-Identifier: GPL-2.0-only */ | COMMENT |
| LOW | util/ectool/ec.c | 1 | /* SPDX-License-Identifier: GPL-2.0-only */ | COMMENT |
| LOW | util/ectool/ec.h | 1 | /* SPDX-License-Identifier: GPL-2.0-only */ | COMMENT |
| LOW | util/supermicro/smcbiosinfo/smcbiosinfo.c | 1 | /* SPDX-License-Identifier: GPL-2.0-only */ | COMMENT |
| LOW | util/spdtool/spdtool.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | util/spkmodem_recv/spkmodem-recv.c | 1 | /* spkmodem-recv.c - decode spkmodem signals */ | COMMENT |
| LOW | util/inteltool/iobp.c | 1 | /* inteltool - dump all registers on an Intel CPU + chipset based system */ | COMMENT |
| LOW | util/inteltool/cpu.c | 1 | /* inteltool - dump all registers on an Intel CPU + chipset based system */ | COMMENT |
| LOW | util/inteltool/cpu.c | 21 | #define CPUID_STRUCT_EXTENDED_FEATURE_FLAGS 0x7 | COMMENT |
| LOW | util/inteltool/inteltool.c | 1 | /* inteltool - dump all registers on an Intel CPU + chipset based system */ | COMMENT |
| LOW | util/inteltool/gpio_groups.c | 1 | /* inteltool - dump all registers on an Intel CPU + chipset based system */ | COMMENT |
| LOW | util/inteltool/gpio_groups.c | 21 | #include "gpio_names/sunrise.h" | COMMENT |
| LOW | util/inteltool/inteltool.h | 1 | /* inteltool - dump all registers on an Intel CPU + chipset based system */ | COMMENT |
| LOW | util/inteltool/inteltool.h | 21 | #include <DirectHW/DirectHW.h> | COMMENT |
| LOW | util/inteltool/inteltool.h | 61 | #define PCI_DEVICE_ID_INTEL_ICH0 0x2420 | COMMENT |
| LOW | util/inteltool/inteltool.h | 81 | #define PCI_DEVICE_ID_INTEL_ICH10DO 0x3a14 | COMMENT |
| LOW | util/inteltool/inteltool.h | 101 | #define PCI_DEVICE_ID_INTEL_B55_B 0x3b1e | COMMENT |
| LOW | util/inteltool/inteltool.h | 121 | #define PCI_DEVICE_ID_INTEL_Q77 0x1e47 | COMMENT |
| LOW | util/inteltool/inteltool.h | 141 | #define PCI_DEVICE_ID_INTEL_SUNRISEPOINT_PRE 0xa141 | COMMENT |
| LOW | util/inteltool/inteltool.h | 161 | #define PCI_DEVICE_ID_INTEL_TIGERPOINT_EMBEDDED_IOTG 0xa088 | COMMENT |
| LOW | util/inteltool/inteltool.h | 181 | #define PCI_DEVICE_ID_INTEL_C626 0xa1c5 | COMMENT |
| LOW | util/inteltool/inteltool.h | 201 | #define PCI_DEVICE_ID_INTEL_Q270 0xa2c6 | COMMENT |
| LOW | util/inteltool/inteltool.h | 221 | #define PCI_DEVICE_ID_INTEL_H570 0x4386 | COMMENT |
| LOW | util/inteltool/inteltool.h | 241 | #define PCI_DEVICE_ID_INTEL_R680E 0x7a90 | COMMENT |
| LOW | util/inteltool/inteltool.h | 261 | #define PCI_DEVICE_ID_INTEL_MTL_7 0x7e07 | COMMENT |
| LOW | util/inteltool/inteltool.h | 281 | #define PCI_DEVICE_ID_INTEL_PTL_H_ESPI_15 0xe40f | COMMENT |
| LOW | util/inteltool/inteltool.h | 301 | #define PCI_DEVICE_ID_INTEL_PTL_U_H_ESPI_2 0xe302 | COMMENT |
| LOW | util/inteltool/inteltool.h | 321 | #define PCI_DEVICE_ID_INTEL_PTL_U_H_ESPI_22 0xe316 | COMMENT |
| LOW | util/inteltool/inteltool.h | 341 | #define PCI_DEVICE_ID_INTEL_82945GSE 0x27ac | COMMENT |
| LOW | util/inteltool/inteltool.h | 361 | #define PCI_DEVICE_ID_INTEL_Z85 0x8c46 | COMMENT |
| LOW | util/inteltool/inteltool.h | 381 | #define PCI_DEVICE_ID_INTEL_WELLSBURG_X99 0x8d47 | COMMENT |
| LOW | util/inteltool/inteltool.h | 401 | #define PCI_DEVICE_ID_INTEL_EHL 0x4b00 | COMMENT |
| LOW | util/inteltool/inteltool.h | 421 | #define PCI_DEVICE_ID_INTEL_APL_LPC 0x5ae8 | COMMENT |
| LOW | util/inteltool/inteltool.h | 441 | #define PCI_DEVICE_ID_INTEL_CORE_1ST_GEN_M 0x0044 /* Arrandale (Westmere Mobile) */ | COMMENT |
| LOW | util/inteltool/inteltool.h | 461 | #define PCI_DEVICE_ID_INTEL_CORE_6TH_GEN_WST 0x1918 /* Skylake (Workstation) */ | COMMENT |
| LOW | util/inteltool/inteltool.h | 481 | #define PCI_DEVICE_ID_INTEL_CORE_CML_S_2 0x9b73 /* Cometlake S 2 (Desktop) */ | COMMENT |
| LOW | util/inteltool/inteltool.h | 501 | #define PCI_DEVICE_ID_INTEL_CORE_ADL_ID_P_2_8 0x4601 /* Alderlake P 2+8 */ | COMMENT |
| LOW | util/inteltool/inteltool.h | 521 | #define PCI_DEVICE_ID_INTEL_CORE_MTL_ID_P_4 0x7d15 /* Meteorlake P */ | COMMENT |
| LOW | util/inteltool/inteltool.h | 541 | #define PCI_DEVICE_ID_INTEL_CORE_RPL_ID_H_4_8 0xa707 /* Raptorlake H/H Refresh/P 4P+8E */ | COMMENT |
| LOW | util/inteltool/inteltool.h | 561 | #define PCI_DEVICE_ID_INTEL_4_SERIES_1 0x2a43 | COMMENT |
| LOW | util/inteltool/inteltool.h | 581 | #define PCI_DEVICE_ID_INTEL_HD_3000_4 0x0126 | COMMENT |
| LOW | util/inteltool/inteltool.h | 601 | #define PCI_DEVICE_ID_INTEL_UHD_615_1 0x591C | COMMENT |
| LOW | util/inteltool/inteltool.h | 621 | #define PCI_DEVICE_ID_INTEL_UHD_GRAPHICS 0x9b41 | COMMENT |
| LOW | util/inteltool/inteltool.h | 641 | #define PCI_DEVICE_ID_INTEL_EHL_GT1_5 0x4570 | COMMENT |
| LOW | util/inteltool/inteltool.h | 661 | #define PCI_DEVICE_ID_INTEL_PTL_H_GT2_2 0xb0a0 | COMMENT |
| LOW | util/lint/spelling.txt | 1 | # Originally from Debian's Lintian tool. Various false positives have been | COMMENT |
| LOW | util/lint/spelling.txt | 21 | # Reason: On RISC-V, `SEPC` is the name of a register. | COMMENT |
| LOW | util/lint/spelling.txt | 41 | # doesent||doesn't | COMMENT |
| LOW | util/lint/spelling.txt | 61 | # incase||in case | COMMENT |
| 23785 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | util/qualcomm/createxbl.py | 2 | #============================================================================ | COMMENT |
| MEDIUM | util/qualcomm/createxbl.py | 13 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM | util/qualcomm/createxbl.py | 36 | #============================================================================ | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 30 | #=============================================================================== | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 40 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 42 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 190 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 192 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 194 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 196 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 197 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 199 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 208 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 210 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 274 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 282 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 292 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 294 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 497 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 499 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 506 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 508 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 753 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 755 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 757 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 759 | #------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 765 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 767 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 770 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 772 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 775 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 777 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 788 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 790 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 800 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 802 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 804 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 806 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 853 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 855 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 859 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 861 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 904 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 908 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 912 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 914 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1386 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1388 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1429 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1431 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1486 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1488 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1560 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1562 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1609 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1611 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1724 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1726 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1728 | #---------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1730 | #---------------------------------------------------------------------------- | COMMENT |
| 80 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | util/qualcomm/createxbl.py | 636 | print("Error: Failed to find entry point in any segment!") | CODE |
| MEDIUM | util/qualcomm/elf_segment_extractor.py | 87 | print("Error: Not an ELF file (invalid magic bytes).") | CODE |
| MEDIUM | util/qualcomm/elf_segment_extractor.py | 99 | print("Error: Unsupported ELF data encoding.") | CODE |
| MEDIUM | util/qualcomm/elf_segment_extractor.py | 139 | print("Error: Unsupported ELF class.") | CODE |
| MEDIUM | util/qualcomm/elf_segment_extractor.py | 164 | print(f"Error: Segment index {segment_index} is out of bounds.") | CODE |
| MEDIUM | util/qualcomm/elf_segment_extractor.py | 185 | print("Error: Unsupported ELF class for parsing program header.") | CODE |
| MEDIUM⚡ | util/qualcomm/elf_segment_extractor.py | 251 | print(f"Error: No segments found in ELF file '{elf_file_path}'. Cannot extract last segment | CODE |
| MEDIUM⚡ | util/qualcomm/elf_segment_extractor.py | 259 | print(f"Error: Invalid segment index or alias '{seg_arg}'. Segment index must be an integer, | CODE |
| MEDIUM⚡ | util/qualcomm/elf_segment_extractor.py | 263 | print(f"Error: Segment index {actual_segment_index} is out of bounds for '{elf_file_path}'.") | CODE |
| MEDIUM⚡ | util/qualcomm/elf_segment_extractor.py | 318 | print(f"Error writing to output file '{output_file_path}': {io_e}") | CODE |
| LOW⚡ | util/qualcomm/elf_segment_extractor.py | 319 | except Exception as write_e: | CODE |
| MEDIUM⚡ | util/qualcomm/elf_segment_extractor.py | 326 | print(f"Error: ELF file not found at '{elf_file_path}'") | CODE |
| LOW⚡ | util/qualcomm/elf_segment_extractor.py | 327 | except Exception as e: | CODE |
| MEDIUM⚡ | util/qualcomm/elf_segment_extractor.py | 328 | print(f"An error occurred: {e}") | CODE |
| LOW | util/qualcomm/create_multielf.py | 39 | except Exception as e: | CODE |
| LOW | util/qualcomm/create_multielf.py | 51 | except Exception as e: | CODE |
| MEDIUM | util/qualcomm/create_multielf.py | 36 | def check_outfile_path(dir_path): | CODE |
| MEDIUM⚡ | util/font/generate_font.py | 26 | print(f"Error: Font file '{font_path}' not found.", file=sys.stderr) | CODE |
| MEDIUM⚡ | util/font/generate_font.py | 36 | print("Error: Width and Height must be positive integers.", file=sys.stderr) | CODE |
| MEDIUM⚡ | util/font/generate_font.py | 45 | print(f"Error: Could not open font file '{font_path}'.", file=sys.stderr) | CODE |
| MEDIUM | src/vendorcode/cavium/bdk/libdram/dram-spd.c | 269 | debug_print("Error reading SPD for DIMM\n"); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | util/lint/checkpatch.pl | 717 | #Create a search pattern for all these functions to speed up a loop below | COMMENT |
| MEDIUM | util/lint/checkpatch.pl | 752 | #Create a search pattern for all these strings to speed up a loop below | COMMENT |
| MEDIUM | util/lint/helper_functions.sh | 5 | # This file is sourced by the linters so that each one doesn't have to | COMMENT |
| MEDIUM | util/qualcomm/createxbl.py | 345 | # Create a new ELF header for the output file | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 923 | # Create a elf header and program header | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1188 | # Create an empty hash entry for PHDR_TYPE | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1192 | # Create an empty hash entry for the hash segment itself | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1481 | # Create the Final Signed Image File | COMMENT |
| MEDIUM⚡ | util/qualcomm/mbn_tools.py | 1733 | # Create a list to hold all segment information from an input SCL file | COMMENT |
| MEDIUM | util/qualcomm/mbn_tools.py | 1467 | # Create the Certificate Chain | COMMENT |
| MEDIUM | util/qualcomm/mbn_tools.py | 1760 | # Create a new SegmentInfo class and set up tokens | COMMENT |
| MEDIUM | util/release/gerrit_stats.pl | 403 | # Create a readable date | COMMENT |
| MEDIUM | util/release/gerrit_stats.pl | 411 | # Create the list of commenters to print | COMMENT |
| MEDIUM | util/release/gerrit_stats.pl | 434 | # Create the list of reviewers to print | COMMENT |
| MEDIUM | util/riscv/sifive-gpt.py | 140 | # Create a partition entry for the bootblock | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | util/gitconfig/test/commit-message-hook.sh | 51 | git config user.name "John Doe" | CODE |
| LOW | util/gitconfig/test/timeout.sh | 53 | git config user.name "John Doe" | CODE |
| LOW | tests/lib/fmap-test.c | 110 | char *dummy_data = malloc(ro_rw_section_size); | CODE |
| LOW | tests/lib/fmap-test.c | 114 | dummy_data[i] = '0' + i % ('9' - '0'); | CODE |
| LOW⚡ | tests/lib/fmap-test.c | 145 | rdev_writeat(&rdev, dummy_data, 0, ro_rw_section_size)); | CODE |
| LOW⚡ | tests/lib/fmap-test.c | 151 | assert_memory_equal(dummy_data, buffer2, ro_rw_section_size); | CODE |
| LOW⚡ | tests/lib/fmap-test.c | 155 | free(dummy_data); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 186 | uint8_t dummy_data[dummy_data_size]; | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 191 | dummy_data[i] = 'A' + i % ('Z' - 'A'); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 198 | ret = region_file_update_data(®f, dummy_data, dummy_data_size / 2); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 203 | assert_memory_equal(dummy_data, output_buffer, dummy_data_size / 2); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 206 | ret = region_file_update_data(®f, dummy_data, dummy_data_size); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 211 | assert_memory_equal(dummy_data, output_buffer, dummy_data_size); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 214 | ret = region_file_update_data(®f, dummy_data, dummy_data_size / 2 + 3); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 219 | assert_memory_equal(dummy_data, output_buffer, dummy_data_size / 2 + 3); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 228 | uint8_t dummy_data[dummy_data_size]; | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 240 | dummy_data[i] = 'A' + i % ('Z' - 'A'); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 243 | .size = data1_size, .data = &dummy_data[data1_offset]}; | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 245 | .size = data2_size, .data = &dummy_data[data2_offset]}; | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 247 | .size = data3_size, .data = &dummy_data[data3_offset]}; | CODE |
| LOW | tests/lib/region_file-test.c | 260 | assert_memory_equal(&dummy_data[data1_offset], output_buffer, data1_size); | CODE |
| LOW | tests/lib/region_file-test.c | 261 | assert_memory_equal(&dummy_data[data1_offset + data2_offset], | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 272 | assert_memory_equal(&dummy_data[data1_offset], output_buffer, data1_size); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 273 | assert_memory_equal(&dummy_data[data2_offset], &output_buffer[data1_size], data2_size); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 274 | assert_memory_equal(&dummy_data[data3_offset], &output_buffer[data1_size + data2_size], | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 284 | assert_memory_equal(&dummy_data[data2_offset], &output_buffer[0], data2_size); | CODE |
| LOW⚡ | tests/lib/region_file-test.c | 285 | assert_memory_equal(&dummy_data[data3_offset], &output_buffer[data2_size], data3_size); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/edk2-stable202111/MdePkg/Include/Protocol/MpService.h | 641 | /// whenever the APs are disabled or the APs are not executing code as requested | COMMENT |
| HIGH | …intel/edk2/UDK2017/MdePkg/Include/Protocol/MpService.h | 597 | /// whenever the APs are disabled or the APs are not executing code as requested | COMMENT |
| HIGH | …/edk2-stable202005/MdePkg/Include/Protocol/MpService.h | 641 | /// whenever the APs are disabled or the APs are not executing code as requested | COMMENT |
| HIGH | …/edk2-stable202305/MdePkg/Include/Protocol/MpService.h | 639 | /// whenever the APs are disabled or the APs are not executing code as requested | COMMENT |
| HIGH | …/edk2-stable202302/MdePkg/Include/Protocol/MpService.h | 639 | /// whenever the APs are disabled or the APs are not executing code as requested | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | util/lint/checkpatch.pl | 2742 | # Check if the commit log has what seems like a diff which can confuse patch | COMMENT |
| LOW | util/lint/checkpatch.pl | 2808 | # Check if MAINTAINERS is being updated. If so, there's probably no need to | COMMENT |
| LOW | util/lint/checkpatch.pl | 2900 | # Check if the commit log is in a possible stack dump | COMMENT |
| LOW | util/lint/checkpatch.pl | 3041 | # Check if it's the start of a commit log | COMMENT |
| LOW | util/lint/checkpatch.pl | 3051 | # Check if there is UTF-8 in a commit log when a mail header has explicitly | COMMENT |
| LOW | util/lint/checkpatch.pl | 3944 | # Check if either of these lines are modified, else | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1271 | # Check if hash segment max size parameter was passed | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1279 | # Check if hash physical address parameter was passed | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1284 | # Check if hash segment max size was passed | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1292 | # Check if a shifting is required to accommodate for the hash segment. | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1376 | # Close files | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1393 | # Open files | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1422 | # Close files | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1553 | # Close files | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1604 | # Close files | COMMENT |
| LOW⚡ | util/qualcomm/mbn_tools.py | 1719 | # Close files | COMMENT |
| LOW | util/qualcomm/mbn_tools.py | 1205 | # Check if the vaddr is page aligned | COMMENT |
| LOW | util/qualcomm/mbn_tools.py | 1507 | # Open files | COMMENT |
| LOW | util/qualcomm/mbn_tools.py | 1579 | # Open files | COMMENT |
| LOW | util/qualcomm/mbn_tools.py | 1626 | # Open files | COMMENT |
| LOW | util/kconfig/streamline_config.pl | 504 | # Check if something other than a module selects this config | COMMENT |
| LOW | util/chromeos/extract_blobs.sh | 69 | # Check if image file is provided | COMMENT |
| LOW | util/riscv/sifive-gpt.py | 176 | # Verify if first partition is at expected lba, otherwise trampoline will | COMMENT |
| LOW | src/mainboard/google/foster/bct/jtag.cfg | 2 | # Set DebugCtrl to 1 to re-enable Jtag | COMMENT |
| LOW | src/mainboard/google/smaug/bct/jtag.cfg | 2 | # Set JtagCtrl to 1 to re-enable Jtag | COMMENT |
| LOW | src/mainboard/nvidia/porg/bct/jtag.cfg | 2 | # Set JtagCtrl to 1 to re-enable Jtag | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | util/kconfig/streamline_config.pl | 564 | # If the config has no prompt, then we need to check if a config | COMMENT |
| LOW | src/northbridge/via/cx700/raminit.c | 398 | /* The purpose of this function is to set initial values for the dram | COMMENT |
| LOW | src/northbridge/via/cx700/raminit.c | 1036 | // Step 16: Repeat Step 14 and 15 another 7 times | COMMENT |
| LOW | …edk2-stable202111/MdePkg/Include/Library/UnitTestLib.h | 113 | skipped. The purpose of this function is to clean up any global state or | CODE |
| LOW | …edk2-stable202111/MdePkg/Include/Library/UnitTestLib.h | 140 | The purpose of this function is to set up any global state or test data. | CODE |
| LOW | …edk2-stable202111/MdePkg/Include/Library/UnitTestLib.h | 154 | The purpose of this function is to clean up any global state or test data. | CODE |
| LOW | …edk2-stable202005/MdePkg/Include/Library/UnitTestLib.h | 113 | skipped. The purpose of this function is to clean up any global state or | CODE |
| LOW | …edk2-stable202005/MdePkg/Include/Library/UnitTestLib.h | 140 | The purpose of this function is to set up any global state or test data. | CODE |
| LOW | …edk2-stable202005/MdePkg/Include/Library/UnitTestLib.h | 154 | The purpose of this function is to clean up any global state or test data. | CODE |
| LOW | …edk2-stable202305/MdePkg/Include/Library/UnitTestLib.h | 113 | skipped. The purpose of this function is to clean up any global state or | CODE |
| LOW | …edk2-stable202305/MdePkg/Include/Library/UnitTestLib.h | 140 | The purpose of this function is to set up any global state or test data. | CODE |
| LOW | …edk2-stable202305/MdePkg/Include/Library/UnitTestLib.h | 154 | The purpose of this function is to clean up any global state or test data. | CODE |
| LOW | …edk2-stable202302/MdePkg/Include/Library/UnitTestLib.h | 113 | skipped. The purpose of this function is to clean up any global state or | CODE |
| LOW | …edk2-stable202302/MdePkg/Include/Library/UnitTestLib.h | 140 | The purpose of this function is to set up any global state or test data. | CODE |
| LOW | …edk2-stable202302/MdePkg/Include/Library/UnitTestLib.h | 154 | The purpose of this function is to clean up any global state or test data. | CODE |
| LOW | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1431 | //Step 0: MRW MR13 OP[0]=1 to enable CBT | COMMENT |
| LOW⚡ | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1486 | //Step 1: CKE go high (Release R_DMCKEFIXOFF, R_DMCKEFIXON=1) | COMMENT |
| LOW⚡ | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1489 | //Step 2:wait tCATX, wait tFC | COMMENT |
| LOW⚡ | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1492 | //Step 3: MRW to command bus training exit (MR13 OP[0]=0 to disable CBT) | COMMENT |
| LOW⚡ | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1499 | //Step 4: | COMMENT |
| LOW | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 3156 | //Step 3: set vref range and step by ddr type | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Documentation/tutorial/part2.md | 3 | ## Step 1: Set up an account at coreboot.org | COMMENT |
| LOW | Documentation/tutorial/part2.md | 65 | ## Step 3: Clone coreboot and configure it for submitting patches | COMMENT |
| LOW | Documentation/tutorial/part2.md | 96 | ## Step 4: Submit a commit | COMMENT |
| LOW | Documentation/tutorial/part2.md | 242 | ## Step 5: Let others review your commit | COMMENT |
| LOW | Documentation/tutorial/part1.md | 29 | ### Step 1 - Install tools and libraries needed for coreboot | COMMENT |
| LOW | Documentation/tutorial/part1.md | 47 | ### Step 2 - Download coreboot source tree | COMMENT |
| LOW | Documentation/tutorial/part1.md | 56 | ### Step 3 - Build the coreboot toolchain | COMMENT |
| LOW | Documentation/tutorial/part1.md | 83 | ### Step 4 - Build the payload - coreinfo | COMMENT |
| LOW | Documentation/tutorial/part1.md | 91 | ### Step 5 - Configure the build | COMMENT |
| LOW | Documentation/tutorial/part1.md | 158 | ### Step 6 - Build coreboot | COMMENT |
| LOW | Documentation/tutorial/part1.md | 176 | ### Step 7 - Install QEMU | COMMENT |
| LOW | Documentation/tutorial/part1.md | 183 | ### Step 8 - Run QEMU | COMMENT |
| LOW | src/northbridge/via/cx700/raminit.c | 1036 | // Step 16: Repeat Step 14 and 15 another 7 times | COMMENT |
| LOW | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1431 | //Step 0: MRW MR13 OP[0]=1 to enable CBT | COMMENT |
| LOW⚡ | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1486 | //Step 1: CKE go high (Release R_DMCKEFIXOFF, R_DMCKEFIXON=1) | COMMENT |
| LOW⚡ | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 1492 | //Step 3: MRW to command bus training exit (MR13 OP[0]=0 to disable CBT) | COMMENT |
| LOW | …rcode/mediatek/mt8192/dramc/dramc_pi_calibration_api.c | 3156 | //Step 3: set vref range and step by ddr type | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | util/intelmetool/src/intelmetool.h | 124 | // Definitely has ME and can be disabled | COMMENT |
| MEDIUM | util/intelmetool/src/intelmetool.h | 134 | // Definitely has ME and is very difficult to remove | COMMENT |
| LOW | payloads/libpayload/curses/PDCurses/sdl1/sdltest.c | 13 | /* You could #include pdcsdl.h, or just add the relevant declarations | COMMENT |
| MEDIUM | …/edk2/edk2-stable202111/MdePkg/Include/Protocol/WiFi.h | 362 | /// robust management frames. | COMMENT |
| MEDIUM | …code/intel/edk2/UDK2017/MdePkg/Include/Protocol/WiFi.h | 368 | /// robust management frames. | COMMENT |
| MEDIUM | …/edk2/edk2-stable202005/MdePkg/Include/Protocol/WiFi.h | 362 | /// robust management frames. | COMMENT |
| MEDIUM | …/edk2/edk2-stable202305/MdePkg/Include/Protocol/WiFi.h | 362 | /// robust management frames. | COMMENT |
| MEDIUM | …/edk2/edk2-stable202302/MdePkg/Include/Protocol/WiFi.h | 362 | /// robust management frames. | COMMENT |
| MEDIUM | …/vendorcode/mediatek/mt8192/dramc/DIG_NONSHUF_config.c | 538 | U8 RD2MRR_EXTEND_EN = 1; // for fix Samsung RD2MRR seamless error, If the samsung fix that bug, this could set 0 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | util/lint/checkpatch_json.py | 10 | CODE | |
| LOW | util/qualcomm/createxbl.py | 39 | CODE | |
| LOW | util/qualcomm/elf_segment_extractor.py | 2 | CODE | |
| LOW | util/qualcomm/elf_segment_extractor.py | 3 | CODE | |
| LOW | util/qualcomm/mbn_tools.py | 32 | CODE | |
| LOW | util/qualcomm/qgpt.py | 16 | CODE | |
| LOW | util/qualcomm/qgpt.py | 17 | CODE | |
| LOW | util/qualcomm/qgpt.py | 18 | CODE | |
| LOW | util/qualcomm/qgpt.py | 19 | CODE | |
| LOW | util/qualcomm/qgpt.py | 22 | CODE | |
| LOW | util/qualcomm/qgpt.py | 26 | CODE | |
| LOW | util/rockchip/make_idb.py | 6 | CODE | |
| LOW | util/apcb/apcb_edit.py | 10 | CODE | |
| LOW | util/apcb/apcb_v3_edit.py | 5 | CODE | |
| LOW | util/apcb/apcb_v3_edit.py | 9 | CODE | |
| LOW | util/apcb/apcb_v3_edit.py | 10 | CODE | |
| LOW | util/apcb/apcb_v3_edit.py | 11 | CODE | |
| LOW | util/apcb/apcb_v3a_edit.py | 8 | CODE | |
| LOW | util/riscv/sifive-gpt.py | 5 | CODE | |
| LOW | util/me_cleaner/me_cleaner.py | 5 | CODE | |
| LOW | util/me_cleaner/me_cleaner.py | 5 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | util/lint/checkpatch_json.py | 30 | CODE | |
| LOW | util/qualcomm/createxbl.py | 282 | CODE | |
| LOW | util/qualcomm/elf_segment_extractor.py | 200 | CODE | |
| LOW | util/qualcomm/mbn_tools.py | 1121 | CODE | |
| LOW | util/qualcomm/mbn_tools.py | 1612 | CODE | |
| LOW | util/qualcomm/mbn_tools.py | 1735 | CODE | |
| LOW | util/qualcomm/mbn_tools.py | 1787 | CODE | |
| LOW | util/qualcomm/mbn_tools.py | 1955 | CODE | |
| LOW | util/apcb/apcb_edit.py | 103 | CODE | |
| LOW | util/font/generate_font.py | 24 | CODE | |
| LOW | util/me_cleaner/me_cleaner.py | 138 | CODE | |
| LOW | util/me_cleaner/me_cleaner.py | 258 | CODE | |
| LOW | util/me_cleaner/me_cleaner.py | 375 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | util/qualcomm/mbn_tools.py | 1185 | # If hash table program header is not found, make sure to include it | COMMENT |
| MEDIUM | payloads/libpayload/curses/PDCurses/sdl1/sdltest.c | 1 | /* Here's a simple example of combining SDL and PDCurses functionality. | COMMENT |
| MEDIUM | payloads/libpayload/curses/PDCurses/demos/xmas.c | 22 | /* Feel free to modify the defined string FROMWHO to reflect you, your */ | COMMENT |
| LOW | src/drivers/efi/capsules.c | 155 | initialization during parsing of capsules and don't forget to call | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | util/qualcomm/mbn_tools.py | 1994 | except: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | payloads/libpayload/drivers/udc/chipidea.c | 333 | // TODO: implement | COMMENT |
| LOW | payloads/libpayload/drivers/udc/chipidea.c | 336 | // TODO: implement | COMMENT |
| LOW | src/soc/sifive/fu540/sdram.c | 49 | // TODO: implement | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | util/qualcomm/mbn_tools.py | 909 | def convert_int_to_byte_string(n, l): | CODE |
| LOW | util/apl_ifwi/apl_ifwi.py | 243 | def create_minimal_smip_payload(smip_iafw): | CODE |
| LOW | util/apl_ifwi/apl_ifwi.py | 617 | def oem_key_manifest_extension(public_hash): | STRING |
| LOW | util/me_cleaner/me_cleaner.py | 229 | def check_partition_signature(f, offset): | CODE |
| LOW | util/me_cleaner/me_cleaner.py | 249 | def print_check_partition_signature(f, offset): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | util/attribution/gen_attribution.sh | 6 | # Usage: | COMMENT |
| LOW | …drivers/intel/fsp2_0/header_util/fspupdvpd_sanitize.sh | 5 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | util/qualcomm/mbn_tools.py | 996 | CODE |