April 2022 - dev - lists.frrouting.org

New Defects reported by Coverity Scan for freerangerouting/frr
by scan-admin＠coverity.com 29 Apr '22

29 Apr '22

Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 3 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 1 of 1 defect(s) ** CID 1517499: Memory - corruptions (OVERRUN) /bgpd/bgp_route.c: 5710 in bgp_nlri_parse_ip() ________________________________________________________________________________________________________ *** CID 1517499: Memory - corruptions (OVERRUN) /bgpd/bgp_route.c: 5710 in bgp_nlri_parse_ip() 5704 "%s [Error] Update packet error (prefix length %d too large for prefix storage %zu)", 5705 peer->host, p.prefixlen, sizeof(p.u)); 5706 return BGP_NLRI_PARSE_ERROR_PACKET_LENGTH; 5707 } 5708 5709 /* Fetch prefix from NLRI packet. */ >>> CID 1517499: Memory - corruptions (OVERRUN) >>> Overrunning array "p.u.val" of 16 bytes by passing it to a function which accesses it at byte offset 47 using argument "psize" (which evaluates to 48). 5710 memcpy(p.u.val, pnt, psize); 5711 5712 /* Check address. */ 5713 if (afi == AFI_IP && safi == SAFI_UNICAST) { 5714 if (IN_CLASSD(ntohl(p.u.prefix4.s_addr))) { 5715 /* From RFC4271 Section 6.3: ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P…

1 0

New Defects reported by Coverity Scan for freerangerouting/frr
by scan-admin＠coverity.com 27 Apr '22

27 Apr '22

Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 3 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 2 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 3 of 3 defect(s) ** CID 1517454: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 663 in ipv6_mld_group_watermark_magic() ________________________________________________________________________________________________________ *** CID 1517454: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 663 in ipv6_mld_group_watermark_magic() 657 "ipv6 mld watermark-warn (1-65535)$limit", 658 IPV6_STR 659 MLD_STR 660 "Configure group limit for watermark warning\n" 661 "Group count to generate watermark warning\n") 662 { >>> CID 1517454: Null pointer dereferences (NULL_RETURNS) >>> Dereferencing "pim", which is known to be "NULL". 663 PIM_DECLVAR_CONTEXT(vrf, pim); 664 /* TBD Depends on MLD data structure changes */ 665 return CMD_SUCCESS; 666 } 667 668 DEFPY (no_ipv6_mld_group_watermark, ** CID 1517453: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 677 in no_ipv6_mld_group_watermark_magic() ________________________________________________________________________________________________________ *** CID 1517453: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 677 in no_ipv6_mld_group_watermark_magic() 671 NO_STR 672 IPV6_STR 673 MLD_STR 674 "Unconfigure group limit for watermark warning\n" 675 IGNORED_IN_NO_STR) 676 { >>> CID 1517453: Null pointer dereferences (NULL_RETURNS) >>> Dereferencing "pim", which is known to be "NULL". 677 PIM_DECLVAR_CONTEXT(vrf, pim); 678 /* TBD Depends on MLD data structure changes */ 679 return CMD_SUCCESS; 680 } 681 682 DEFPY (interface_ipv6_mld_query_max_response_time, ** CID 1517452: Memory - corruptions (OVERRUN) /pimd/pim_zlookup.c: 265 in zclient_read_nexthop() ________________________________________________________________________________________________________ *** CID 1517452: Memory - corruptions (OVERRUN) /pimd/pim_zlookup.c: 265 in zclient_read_nexthop() 259 stream_get(&nexthop_tab[num_ifindex].nexthop_addr, s, 260 sizeof(struct in6_addr)); 261 nexthop_tab[num_ifindex].ifindex = stream_getl(s); 262 263 p.family = AF_INET6; 264 p.prefixlen = IPV6_MAX_BITLEN; >>> CID 1517452: Memory - corruptions (OVERRUN) >>> Overrunning struct type pim_addr of 4 bytes by passing it to a function which accesses it at byte offset 15 using argument "16UL". 265 memcpy(&p.u.prefix6, 266 &nexthop_tab[num_ifindex].nexthop_addr, 267 sizeof(struct in6_addr)); 268 269 /* 270 * If we are sending v6 secondary assume we receive v6 ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P…

1 0

Weekly discussion on MGMT infra and YANG
by Pushpasis Sarkar 12 Apr '22

12 Apr '22

Hi All, As discussed in today’s weekly meeting, setting up this weekly meeting for anyone to bringup and discuss any issues or points regarding the new MGMT work and any other related to YANG infra in general. Individuals who want to discuss anything on these meetings are requested to send the agenda on the ‘yang’ slack channel first. Without any agenda from any member the particular instance of the meeting shall stand cancelled. Thanks and regards -Pushpasis

1 0

Running FRR rpm in container with VPP
by Girish Patoliya 07 Apr '22

07 Apr '22

Hi, I am running ldpd daemon in container where ldpd uses vpp tap as interface. My ldp session gets rejected with error "No Hello", I see lot of below errors: pending_conn_timeout: no adjacency with remote end: 127.0.0.6 What I understand from this is LDP somehow not able to get proper source peer IP from hello message, is that correct? Any idea what could be going wrong ? Thanks a lot Girish ________________________________ This e-mail message may contain confidential or proprietary information of Mavenir Systems, Inc. or its affiliates and is intended solely for the use of the intended recipient(s). If you are not the intended recipient of this message, you are hereby notified that any review, use or distribution of this information is absolutely prohibited and we request that you delete all copies in your control and contact us by e-mailing to security(a)mavenir.com. This message contains the views of its author and may not necessarily reflect the views of Mavenir Systems, Inc. or its affiliates, who employ systems to monitor email messages, but make no representation that such messages are authorized, secure, uncompromised, or free from computer viruses, malware, or other defects. Thank You

1 0

New Defects reported by Coverity Scan for freerangerouting/frr
by scan-admin＠coverity.com 06 Apr '22

06 Apr '22

Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 2 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 2 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 2 of 2 defect(s) ** CID 1515741: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 636 in mld_group_watermark_magic() ________________________________________________________________________________________________________ *** CID 1515741: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 636 in mld_group_watermark_magic() 630 "ipv6 mld watermark-warn (1-65535)$limit", 631 IPV6_STR 632 MLD_STR 633 "Configure group limit for watermark warning\n" 634 "Group count to generate watermark warning\n") 635 { >>> CID 1515741: Null pointer dereferences (NULL_RETURNS) >>> Dereferencing "pim", which is known to be "NULL". 636 PIM_DECLVAR_CONTEXT(vrf, pim); 637 /* TBD Depends on MLD data structure changes */ 638 return CMD_SUCCESS; 639 } 640 641 DEFPY (no_mld_group_watermark, ** CID 1515740: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 650 in no_mld_group_watermark_magic() ________________________________________________________________________________________________________ *** CID 1515740: Null pointer dereferences (NULL_RETURNS) /pimd/pim6_cmd.c: 650 in no_mld_group_watermark_magic() 644 NO_STR 645 IPV6_STR 646 MLD_STR 647 "Unconfigure group limit for watermark warning\n" 648 IGNORED_IN_NO_STR) 649 { >>> CID 1515740: Null pointer dereferences (NULL_RETURNS) >>> Dereferencing "pim", which is known to be "NULL". 650 PIM_DECLVAR_CONTEXT(vrf, pim); 651 /* TBD Depends on MLD data structure changes */ 652 return CMD_SUCCESS; 653 } 654 655 DEFPY (interface_ipv6_mld_query_max_response_time, ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P…

1 0

Announcing the GRRouting fork
by David Lamparter 01 Apr '22

01 Apr '22

Dear all, it is with a heavy heart that I have to announce that due to the way the FRR project has been developing, another fork has become inevitable. I expect that a majority of you are already aware of the ongoing issues we've been having with the community. There simply is no opportunity for any real expression of anger and disdain at the project maintenance. This is very concerning and alienates a large portion of amoeba from participating and contributing constructively. As such, I have been left with no other choice than to create the GRRouting fork. GRRouting's goals and objectives are summarized handily by our new slogan: "putting the GRR back in routing." Of course this applies to development and community standards as well. Our goals will be to deliver software capable of evoking high-quality cursing at your routers. The very first feature will be to implement IP GRR, also known as anGry ReRoute. The plan for this feature is to incorporate a VoIP client and speech synthesis software to expedite waking up network administrators at 3 AM to have them drive to a datacenter to plug some cable. I am confident everyone sees the absolute necessity of this fork. You can find further information at https://grrouting.org/ Saddened but relieved by this finally being out in public, equi

2 1

New Defects reported by Coverity Scan for freerangerouting/frr
by scan-admin＠coverity.com 01 Apr '22

01 Apr '22

Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 2 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 2 of 2 defect(s) ** CID 1515546: Null pointer dereferences (NULL_RETURNS) ________________________________________________________________________________________________________ *** CID 1515546: Null pointer dereferences (NULL_RETURNS) /pimd/pim_zlookup.c: 391 in zclient_lookup_read_pipe() 385 { 386 struct zclient *zlookup = THREAD_ARG(thread); 387 struct pim_instance *pim = pim_get_pim_instance(VRF_DEFAULT); 388 struct pim_zlookup_nexthop nexthop_tab[10]; 389 struct in_addr l = {.s_addr = INADDR_ANY}; 390 >>> CID 1515546: Null pointer dereferences (NULL_RETURNS) >>> Dereferencing a pointer that might be "NULL" "pim" when calling "zclient_lookup_nexthop_once". 391 zclient_lookup_nexthop_once(pim, nexthop_tab, 10, l); 392 thread_add_timer(router->master, zclient_lookup_read_pipe, zlookup, 60, 393 &zlookup_read); 394 } 395 396 int zclient_lookup_nexthop(struct pim_instance *pim, ** CID 1515545: (NULL_RETURNS) ________________________________________________________________________________________________________ *** CID 1515545: (NULL_RETURNS) /pimd/pim_vxlan.c: 902 in pim_vxlan_mlag_update() 896 if (vxlan_mlag.peerlink_rif) 897 pim_ifp = (struct pim_interface *)vxlan_mlag.peerlink_rif->info; 898 if ((vxlan_mlag.flags & PIM_VXLAN_MLAGF_ENABLED) && 899 pim_ifp && (pim_ifp->mroute_vif_index > 0)) 900 pim_vxlan_set_peerlink_rif(pim, peerlink_rif); 901 else >>> CID 1515545: (NULL_RETURNS) >>> Dereferencing a pointer that might be "NULL" "pim" when calling "pim_vxlan_set_peerlink_rif". 902 pim_vxlan_set_peerlink_rif(pim, NULL); 903 } 904 905 /****************************** misc callbacks *******************************/ 906 static void pim_vxlan_set_default_iif(struct pim_instance *pim, 907 struct interface *ifp) /pimd/pim_vxlan.c: 900 in pim_vxlan_mlag_update() 894 895 /* process changes */ 896 if (vxlan_mlag.peerlink_rif) 897 pim_ifp = (struct pim_interface *)vxlan_mlag.peerlink_rif->info; 898 if ((vxlan_mlag.flags & PIM_VXLAN_MLAGF_ENABLED) && 899 pim_ifp && (pim_ifp->mroute_vif_index > 0)) >>> CID 1515545: (NULL_RETURNS) >>> Dereferencing a pointer that might be "NULL" "pim" when calling "pim_vxlan_set_peerlink_rif". 900 pim_vxlan_set_peerlink_rif(pim, peerlink_rif); 901 else 902 pim_vxlan_set_peerlink_rif(pim, NULL); 903 } 904 905 /****************************** misc callbacks *******************************/ ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P…

1 0