- dev - lists.frrouting.org

Support for linux 4.9 LTSI
by Preetam Jain 13 Mar '21

13 Mar '21

Dear members, I am not able to install Frr on Linux 4.9 LTSI , Angstrom distribution I am trying to install from source downloaded from git . There are various issues ,Frr dependencies Libyang Cmake Are the major once when I am trying to install . Please guide me with proper versions of dependencies required to install Frr on my platform mentioned above . Guide me with the dependencies versions and other link support . Regards PJ

1 0

Announcing the 7.5.1 release of FRR
by Martin Winter 08 Mar '21

08 Mar '21

All, We are pleased to announce FRR 7.5.1. This is a maintenance release of FRR 7.5 with lots of bug fixes Debian Packaging - https://deb.frrouting.org/ RPM Packaging - https://rpm.frrouting.org/ Snap Packaging - https://snapcraft.io/frr This release contains the following fixes: BABEL Fix connected route leak on change BFD Session lookup was sometimes wrong Memory leak and handling cleanups In some situations handle vrf appropriately when receiving packets BGP Peer Group Inheritance Fixes Dissallow attempt to peer peers reachable via blackholes Send BMP down message when reachability fails Cleanup handling of aggregator data when the AGG AS is 0 Handle `neighbor <peer-group allowas-in` config changes properly Properly parse community and lcommunity values in some circumstances Allow peer-groups to configure `ttl-security hops` Prevent v6 routes with v4 nexthops from being installed Allow `default-originate` to be cleared from a peer group Fix evpn route-map vni filter at origin local routes were using non-default distance Properly track if the nexthop was updated in some circumstances Cleanup `show running` when running bgp with `-e X` values Various Memory leaks in show commands Properly withdraw exported routes when deleting a VRF Avoid resetting ebgp-multihop if peer setting is the same as peer-group Properly encode flowspec rules to zebra in some rare circumstances Generate statistics for routes in bgp when we have exactly 1 route Properly apply route-map for the default-originate command EIGRP Properly set MTU for eigrp packets sent Various memory leaks and using uninited data fixes ISIS When last area address is removed, resign if we were the DR Various memory leaks and using uninited data fixes LDP Various memory leaks and using uninited data fixes NHRP Use onlink routes when prefix == nh Shortcut routes are installed with proper nexthop OSPF Prevent duplicate packet read in multiple vrf situation Fix area removal at interface level Restore Point to MultiPoint interface types Correctly handle MTU change on startup Multi Instance initialization sometimes was not successful NSSA translate-always was not working properly OSPFv3 Don't send hellos on loopback interfaces Handle ECMP better when a sub-path is removed Memory leak and handling fixes Fix Link LSA not updating when router priority is modified Some output from show commands was wrong Intra area remote connected prefixes sometimes not installed PBR Various memory leaks and using uninited data fixes PIM SGRpt prune received during prune didn't override holdtime Various memory leaks and using uninited data fixes STATIC Fix VRF and usage on startup in some instances Tableid was being mishandled in some cases VTYSH Disable bracketed paste in readline. WATCHFRR Various memory leaks and using uninited data fixes ZEBRA Always install blackhole routes using kernel routes instead of nexthops Various memory leaks and using uninited data fixes Dissallow resolution to duplicate nexthops that created infinite nexthops Apply the route-map delay-timer globally Some routes were stuck in Queued state when using the FPM Better handle vrf creation when using namespaces Set NUD_NOARP on sticky mac entries in addtion to NTF_STICKY Allow `set src X` to work on startup FRR Library Fix a variety of memory leaks Fix VRF Creation in some instances RPKI context editing was not properly handled in reload situations routemap code was not properly handling modification of CLI in some instances SNAPCRAFT Update to using rtrlib 0.7.0 Fix passthrough path for Libyang 1.x ALPINE Remove old docker deps

1 0

New Defects reported by Coverity Scan for freerangerouting/frr
by scan-admin＠coverity.com 07 Mar '21

07 Mar '21

Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 2 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 1 of 1 defect(s) ** CID 1502606: Null pointer dereferences (REVERSE_INULL) /pimd/pim_nb_config.c: 2414 in lib_interface_pim_address_family_mroute_oif_modify() ________________________________________________________________________________________________________ *** CID 1502606: Null pointer dereferences (REVERSE_INULL) /pimd/pim_nb_config.c: 2414 in lib_interface_pim_address_family_mroute_oif_modify() 2408 snprintf(args->errmsg, args->errmsg_len, 2409 "%% Enable PIM and/or IGMP on this interface first"); 2410 return NB_ERR_VALIDATION; 2411 } 2412 2413 #ifdef PIM_ENFORCE_LOOPFREE_MFC >>> CID 1502606: Null pointer dereferences (REVERSE_INULL) >>> Null-checking "iif" suggests that it may be null, but it has already been dereferenced on all paths leading to the check. 2414 if (oif && iif && (iif->ifindex == oif->ifindex)) { 2415 strlcpy(args->errmsg, 2416 "% IIF same as OIF and loopfree enforcement is enabled; rejecting", 2417 args->errmsg_len); 2418 return NB_ERR_VALIDATION; 2419 } ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P…

1 0

debug packets - output
by Michal Ruprich 04 Mar '21

04 Mar '21

Hi all, I am trying to debug eigrp process in FRR and I can't figure out, how to get any output from 'debug eigrp packets all'. Nothing shows up anywhere. Initially, I thought, that I will see the output directly in vtysh as the packets come, but I don't see anything. I tried to set logging to an output file - it gets created but no output in the file. I don't see anything in /var/log/frr either. Can anyone give me a hint as to where and how to get the debugging running? Or any other logging to that matter? Thanks and regards. Michal Ruprich

1 0

New Defects reported by Coverity Scan for freerangerouting/frr
by scan-admin＠coverity.com 27 Feb '21

27 Feb '21

Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 2 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 2 of 2 defect(s) ** CID 1502244: Null pointer dereferences (NULL_RETURNS) /pimd/pim_nb_config.c: 2414 in lib_interface_pim_address_family_mroute_oif_modify() ________________________________________________________________________________________________________ *** CID 1502244: Null pointer dereferences (NULL_RETURNS) /pimd/pim_nb_config.c: 2414 in lib_interface_pim_address_family_mroute_oif_modify() 2408 snprintf(args->errmsg, args->errmsg_len, 2409 "%% Enable PIM and/or IGMP on this interface first"); 2410 return NB_ERR_VALIDATION; 2411 } 2412 2413 #ifdef PIM_ENFORCE_LOOPFREE_MFC >>> CID 1502244: Null pointer dereferences (NULL_RETURNS) >>> Dereferencing "oif", which is known to be "NULL". 2414 if (iif->ifindex == oif->ifindex) { 2415 strlcpy(args->errmsg, 2416 "% IIF same as OIF and loopfree enforcement is enabled; rejecting", 2417 args->errmsg_len); 2418 return NB_ERR_VALIDATION; 2419 } ** CID 1502243: Error handling issues (CHECKED_RETURN) /bgpd/bgp_evpn_mh.c: 1704 in bgp_evpn_local_es_activate() ________________________________________________________________________________________________________ *** CID 1502243: Error handling issues (CHECKED_RETURN) /bgpd/bgp_evpn_mh.c: 1704 in bgp_evpn_local_es_activate() 1698 /* generate EAD-EVI */ 1699 bgp_evpn_local_type1_evi_route_add(bgp, es); 1700 1701 /* generate EAD-ES */ 1702 build_evpn_type1_prefix(&p, BGP_EVPN_AD_ES_ETH_TAG, &es->esi, 1703 es->originator_ip); >>> CID 1502243: Error handling issues (CHECKED_RETURN) >>> Calling "bgp_evpn_type1_route_update" without checking return value (as is done elsewhere 4 out of 5 times). 1704 bgp_evpn_type1_route_update(bgp, es, NULL, &p); 1705 } 1706 } 1707 1708 /* Process ES link oper-up by generating ES-EAD and ESR */ 1709 static void bgp_evpn_local_es_up(struct bgp *bgp, struct bgp_evpn_es *es, ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P…

1 0

Canceled: FRR Telco meeting
by olivier.dugeon＠orange.com 17 Feb '21

17 Feb '21

When: Wednesday, February 17, 2021 4:00 PM-5:00 PM. (UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna Where: BlueJean https://bluejeans.com/377688464 *~*~*~*~*~*~*~*~*~* Hi all, This is the invite for the regular be-weekly Telco's meeting for 2021. NOTE: THE MEETING ID CHANGE. Please use https://bluejeans.com/377688464 for the next Telco meetings Regards Olivier _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.

1 0

New Defects reported by Coverity Scan for freerangerouting/frr
by scan-admin＠coverity.com 12 Feb '21

12 Feb '21

Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 6 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 6 of 6 defect(s) ** CID 1501748: Insecure data handling (TAINTED_SCALAR) /bgpd/bgp_mplsvpn_snmp.c: 1162 in mplsL3vpnVrfRtTable() ________________________________________________________________________________________________________ *** CID 1501748: Insecure data handling (TAINTED_SCALAR) /bgpd/bgp_mplsvpn_snmp.c: 1162 in mplsL3vpnVrfRtTable() 1156 .rtlist[BGP_VPN_POLICY_DIR_FROMVPN], 1157 ECOMMUNITY_FORMAT_ROUTE_MAP, 1158 ECOMMUNITY_ROUTE_TARGET); 1159 break; 1160 case MPLSVPNVRFRTTYPEEXPORT: 1161 case MPLSVPNVRFRTTYPEBOTH: >>> CID 1501748: Insecure data handling (TAINTED_SCALAR) >>> Using tainted variable "rt_index" as an index into an array "l3vpn_bgp->vpn_policy". 1162 rt_b = ecommunity_ecom2str( 1163 l3vpn_bgp->vpn_policy[rt_index] 1164 .rtlist[BGP_VPN_POLICY_DIR_TOVPN], 1165 ECOMMUNITY_FORMAT_ROUTE_MAP, 1166 ECOMMUNITY_ROUTE_TARGET); 1167 break; ** CID 1501747: Integer handling issues (CONSTANT_EXPRESSION_RESULT) /bgpd/bgp_mplsvpn_snmp.c: 1033 in bgpL3vpnVrfRt_lookup() ________________________________________________________________________________________________________ *** CID 1501747: Integer handling issues (CONSTANT_EXPRESSION_RESULT) /bgpd/bgp_mplsvpn_snmp.c: 1033 in bgpL3vpnVrfRt_lookup() 1027 l3vpn_bgp = bgp_lookup_by_name(vrf_name); 1028 if (l3vpn_bgp && !is_bgp_vrf_mplsvpn(l3vpn_bgp)) 1029 return NULL; 1030 if (!l3vpn_bgp) 1031 return NULL; 1032 /* check the index and type match up */ >>> CID 1501747: Integer handling issues (CONSTANT_EXPRESSION_RESULT) >>> The "or" condition "*rt_index != AFI_IP || *rt_index != AFI_IP6" will always be true because "*rt_index" cannot be equal to two different values at the same time, so it must be not equal to at least one of them. 1033 if ((*rt_index != AFI_IP) || (*rt_index != AFI_IP6)) 1034 return NULL; 1035 /* do we have RT config */ 1036 if (!(l3vpn_bgp->vpn_policy[*rt_index] 1037 .rtlist[BGP_VPN_POLICY_DIR_FROMVPN] 1038 || l3vpn_bgp->vpn_policy[*rt_index] ** CID 1501746: Null pointer dereferences (REVERSE_INULL) /bgpd/bgp_mplsvpn_snmp.c: 1461 in bgpL3vpnRte_lookup() ________________________________________________________________________________________________________ *** CID 1501746: Null pointer dereferences (REVERSE_INULL) /bgpd/bgp_mplsvpn_snmp.c: 1461 in bgpL3vpnRte_lookup() 1455 if (str_len == 0) { 1456 *l3vpn_bgp = bgp_lookup_by_name_next(vrf_name); 1457 } else 1458 /* otherwise lookup the one we have */ 1459 *l3vpn_bgp = bgp_lookup_by_name(vrf_name); 1460 >>> CID 1501746: Null pointer dereferences (REVERSE_INULL) >>> Null-checking "l3vpn_bgp" suggests that it may be null, but it has already been dereferenced on all paths leading to the check. 1461 if (l3vpn_bgp == NULL) 1462 return NULL; 1463 1464 pi = bgp_lookup_route_next(l3vpn_bgp, dest, &prefix, policy, 1465 &nexthop); 1466 if (pi) { ** CID 1501745: (TAINTED_SCALAR) /bgpd/bgp_mplsvpn_snmp.c: 1088 in bgpL3vpnVrfRt_lookup() /bgpd/bgp_mplsvpn_snmp.c: 1075 in bgpL3vpnVrfRt_lookup() /bgpd/bgp_mplsvpn_snmp.c: 1078 in bgpL3vpnVrfRt_lookup() ________________________________________________________________________________________________________ *** CID 1501745: (TAINTED_SCALAR) /bgpd/bgp_mplsvpn_snmp.c: 1088 in bgpL3vpnVrfRt_lookup() 1082 && !import) 1083 continue; 1084 if (*rt_type == MPLSVPNVRFRTTYPEEXPORT 1085 && !export) 1086 continue; 1087 /* ckeck for both */ >>> CID 1501745: (TAINTED_SCALAR) >>> Using tainted variable "*rt_index" as an index into an array "l3vpn_bgp->vpn_policy". 1088 if (*rt_type == MPLSVPNVRFRTTYPEIMPORT && import 1089 && export 1090 && ecommunity_cmp( 1091 l3vpn_bgp->vpn_policy[*rt_index].rtlist 1092 [BGP_VPN_POLICY_DIR_FROMVPN], 1093 l3vpn_bgp->vpn_policy[*rt_index].rtlist /bgpd/bgp_mplsvpn_snmp.c: 1075 in bgpL3vpnVrfRt_lookup() 1069 *rt_type = 0; 1070 break; 1071 } 1072 if (*rt_type) { 1073 bool import, export; 1074 >>> CID 1501745: (TAINTED_SCALAR) >>> Using tainted variable "*rt_index" as an index into an array "l3vpn_bgp->vpn_policy". 1075 import = 1076 (!!l3vpn_bgp->vpn_policy[*rt_index].rtlist 1077 [BGP_VPN_POLICY_DIR_FROMVPN]); 1078 export = 1079 (!!l3vpn_bgp->vpn_policy[*rt_index].rtlist 1080 [BGP_VPN_POLICY_DIR_TOVPN]); /bgpd/bgp_mplsvpn_snmp.c: 1078 in bgpL3vpnVrfRt_lookup() 1072 if (*rt_type) { 1073 bool import, export; 1074 1075 import = 1076 (!!l3vpn_bgp->vpn_policy[*rt_index].rtlist 1077 [BGP_VPN_POLICY_DIR_FROMVPN]); >>> CID 1501745: (TAINTED_SCALAR) >>> Using tainted variable "*rt_index" as an index into an array "l3vpn_bgp->vpn_policy". 1078 export = 1079 (!!l3vpn_bgp->vpn_policy[*rt_index].rtlist 1080 [BGP_VPN_POLICY_DIR_TOVPN]); 1081 if (*rt_type == MPLSVPNVRFRTTYPEIMPORT 1082 && !import) 1083 continue; ** CID 1501744: Null pointer dereferences (NULL_RETURNS) ________________________________________________________________________________________________________ *** CID 1501744: Null pointer dereferences (NULL_RETURNS) /bgpd/bgp_mplsvpn_snmp.c: 1464 in bgpL3vpnRte_lookup() 1458 /* otherwise lookup the one we have */ 1459 *l3vpn_bgp = bgp_lookup_by_name(vrf_name); 1460 1461 if (l3vpn_bgp == NULL) 1462 return NULL; 1463 >>> CID 1501744: Null pointer dereferences (NULL_RETURNS) >>> Dereferencing a pointer that might be "NULL" "*l3vpn_bgp" when calling "bgp_lookup_route_next". 1464 pi = bgp_lookup_route_next(l3vpn_bgp, dest, &prefix, policy, 1465 &nexthop); 1466 if (pi) { 1467 uint8_t vrf_name_len = 1468 strnlen((*l3vpn_bgp)->name, VRF_NAMSIZ); 1469 const struct prefix *p = bgp_dest_get_prefix(*dest); ** CID 1501743: (OVERRUN) ________________________________________________________________________________________________________ *** CID 1501743: (OVERRUN) /bgpd/bgp_mplsvpn_snmp.c: 1411 in bgpL3vpnRte_lookup() 1405 oid2in_addr(&name[i], sizeof(struct in_addr), 1406 &prefix.u.prefix4); 1407 i += sizeof(struct in_addr); 1408 break; 1409 case INETADDRESSTYPEIPV6: 1410 prefix.family = AF_INET6; >>> CID 1501743: (OVERRUN) >>> Overrunning struct type in_addr of 4 bytes by passing it to a function which accesses it at byte offset 15 using argument "16". 1411 oid2in_addr(&name[i], sizeof(struct in6_addr), 1412 &prefix.u.prefix4); /* sic */ 1413 i += sizeof(struct in6_addr); 1414 break; 1415 } 1416 prefix.prefixlen = (uint8_t)name[i++]; /bgpd/bgp_mplsvpn_snmp.c: 1434 in bgpL3vpnRte_lookup() 1428 oid2in_addr(&name[i], sizeof(struct in_addr), 1429 &nexthop.ip._v4_addr); 1430 i += sizeof(struct in_addr); 1431 break; 1432 case INETADDRESSTYPEIPV6: 1433 nexthop.ipa_type = IPADDR_V6; >>> CID 1501743: (OVERRUN) >>> Overrunning struct type in_addr of 4 bytes by passing it to a function which accesses it at byte offset 15 using argument "16". 1434 oid2in_addr(&name[i], sizeof(struct in6_addr), 1435 &nexthop.ip._v4_addr); /* sic */ 1436 i += sizeof(struct in6_addr); 1437 break; 1438 } 1439 } /bgpd/bgp_mplsvpn_snmp.c: 1482 in bgpL3vpnRte_lookup() 1476 /* copy the index parameters */ 1477 oid_copy_str(&name[namelen], (*l3vpn_bgp)->name, 1478 vrf_name_len); 1479 oid_index = namelen + vrf_name_len; 1480 name[oid_index++] = 1481 v4 ? INETADDRESSTYPEIPV4 : INETADDRESSTYPEIPV6; >>> CID 1501743: (OVERRUN) >>> Overrunning struct type in_addr of 4 bytes by passing it to a function which accesses it at byte offset 15 using argument "addr_len" (which evaluates to 16). 1482 oid_copy_addr(&name[oid_index], &p->u.prefix4, 1483 addr_len); 1484 oid_index += addr_len; 1485 name[oid_index++] = p->prefixlen; 1486 name[oid_index++] = *policy >> 8; 1487 name[oid_index++] = *policy & 0xff; ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P…

1 0

Disable compiling python codes in FRR
by Shahriar Basiri 08 Feb '21

08 Feb '21

Dear FRR community,I need to disable compiling python codes in FRR. I am cross compiling FRR but my toolchain doesn't have python. I think main frr codes is in c and maybe some tests and GUI are using python. is it at all possible to disable compiling python codes? Any help is really appreciated.ThanksShahriar

1 0

Canceled: Northbound Weekly meeting
by Santosh P K 04 Feb '21

04 Feb '21

All, Adjusted day light saving and this is the new slot we are going to use for northbound weekly meeting. Thanks Santosh P K

1 0

Canceled: Northbound Weekly meeting
by Santosh P K 28 Jan '21

28 Jan '21

All, Adjusted day light saving and this is the new slot we are going to use for northbound weekly meeting. Thanks Santosh P K

1 0