New Defects reported by Coverity Scan for freerangerouting/frr
Hi, Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan. 2 new defect(s) introduced to freerangerouting/frr found with Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 2 of 2 defect(s) ** CID 1598496: (USE_AFTER_FREE) /bgpd/bgp_evpn.c: 6344 in bgp_evpn_free() /bgpd/bgp_evpn.c: 6344 in bgp_evpn_free() ________________________________________________________________________________________________________ *** CID 1598496: (USE_AFTER_FREE) /bgpd/bgp_evpn.c: 6344 in bgp_evpn_free() 6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest; 6339 dest = dest_next) { 6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 6341 if (dest->za_vpn == vpn) { 6342 bgp_path_info_unlock(dest->za_bgp_pi); 6343 bgp_dest_unlock_node(dest);
CID 1598496: (USE_AFTER_FREE) Calling "zebra_announce_del" dereferences freed pointer "dest".
6344 zebra_announce_del(&bm->zebra_announce_head, dest); 6345 } 6346 } 6347 6348 bgp_evpn_remote_ip_hash_destroy(vpn); 6349 bgp_evpn_vni_es_cleanup(vpn); /bgpd/bgp_evpn.c: 6344 in bgp_evpn_free() 6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest; 6339 dest = dest_next) { 6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 6341 if (dest->za_vpn == vpn) { 6342 bgp_path_info_unlock(dest->za_bgp_pi); 6343 bgp_dest_unlock_node(dest);
CID 1598496: (USE_AFTER_FREE) Passing freed pointer "dest" as an argument to "zebra_announce_del".
6344 zebra_announce_del(&bm->zebra_announce_head, dest); 6345 } 6346 } 6347 6348 bgp_evpn_remote_ip_hash_destroy(vpn); 6349 bgp_evpn_vni_es_cleanup(vpn); /bgpd/bgp_evpn.c: 6344 in bgp_evpn_free() 6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest; 6339 dest = dest_next) { 6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 6341 if (dest->za_vpn == vpn) { 6342 bgp_path_info_unlock(dest->za_bgp_pi); 6343 bgp_dest_unlock_node(dest);
CID 1598496: (USE_AFTER_FREE) Calling "zebra_announce_del" dereferences freed pointer "dest".
6344 zebra_announce_del(&bm->zebra_announce_head, dest); 6345 } 6346 } 6347 6348 bgp_evpn_remote_ip_hash_destroy(vpn); 6349 bgp_evpn_vni_es_cleanup(vpn); /bgpd/bgp_evpn.c: 6344 in bgp_evpn_free() 6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest; 6339 dest = dest_next) { 6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 6341 if (dest->za_vpn == vpn) { 6342 bgp_path_info_unlock(dest->za_bgp_pi); 6343 bgp_dest_unlock_node(dest);
CID 1598496: (USE_AFTER_FREE) Passing freed pointer "dest" as an argument to "zebra_announce_del".
6344 zebra_announce_del(&bm->zebra_announce_head, dest); 6345 } 6346 } 6347 6348 bgp_evpn_remote_ip_hash_destroy(vpn); 6349 bgp_evpn_vni_es_cleanup(vpn);
** CID 1598495: (USE_AFTER_FREE) /bgpd/bgpd.c: 3959 in bgp_delete() /bgpd/bgpd.c: 3959 in bgp_delete() ________________________________________________________________________________________________________ *** CID 1598495: (USE_AFTER_FREE) /bgpd/bgpd.c: 3959 in bgp_delete() 3953 dest = dest_next) { 3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 3955 dest_table = bgp_dest_table(dest); 3956 if (dest_table->bgp == bgp) { 3957 bgp_path_info_unlock(dest->za_bgp_pi); 3958 bgp_dest_unlock_node(dest);
CID 1598495: (USE_AFTER_FREE) Calling "zebra_announce_del" dereferences freed pointer "dest".
3959 zebra_announce_del(&bm->zebra_announce_head, dest); 3960 } 3961 } 3962 3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head); 3964 if (BGP_DEBUG(zebra, ZEBRA)) /bgpd/bgpd.c: 3959 in bgp_delete() 3953 dest = dest_next) { 3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 3955 dest_table = bgp_dest_table(dest); 3956 if (dest_table->bgp == bgp) { 3957 bgp_path_info_unlock(dest->za_bgp_pi); 3958 bgp_dest_unlock_node(dest);
CID 1598495: (USE_AFTER_FREE) Calling "zebra_announce_del" dereferences freed pointer "dest".
3959 zebra_announce_del(&bm->zebra_announce_head, dest); 3960 } 3961 } 3962 3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head); 3964 if (BGP_DEBUG(zebra, ZEBRA)) /bgpd/bgpd.c: 3959 in bgp_delete() 3953 dest = dest_next) { 3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 3955 dest_table = bgp_dest_table(dest); 3956 if (dest_table->bgp == bgp) { 3957 bgp_path_info_unlock(dest->za_bgp_pi); 3958 bgp_dest_unlock_node(dest);
CID 1598495: (USE_AFTER_FREE) Passing freed pointer "dest" as an argument to "zebra_announce_del".
3959 zebra_announce_del(&bm->zebra_announce_head, dest); 3960 } 3961 } 3962 3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head); 3964 if (BGP_DEBUG(zebra, ZEBRA)) /bgpd/bgpd.c: 3959 in bgp_delete() 3953 dest = dest_next) { 3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest); 3955 dest_table = bgp_dest_table(dest); 3956 if (dest_table->bgp == bgp) { 3957 bgp_path_info_unlock(dest->za_bgp_pi); 3958 bgp_dest_unlock_node(dest);
CID 1598495: (USE_AFTER_FREE) Passing freed pointer "dest" as an argument to "zebra_announce_del".
3959 zebra_announce_del(&bm->zebra_announce_head, dest); 3960 } 3961 } 3962 3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head); 3964 if (BGP_DEBUG(zebra, ZEBRA))
________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=u001.AxU2LYlgjL6eX23u9ErQy-2B...
participants (1)
-
scan-admin＠coverity.com