[dev] New Defects reported by Coverity Scan for freerangerouting/frr
scan-admin at coverity.com
scan-admin at coverity.com
Sat Aug 19 07:51:13 EDT 2017
Hi,
Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 1454333: (STRING_OVERFLOW)
/eigrpd/eigrp_packet.c: 618 in eigrp_read()
/eigrpd/eigrp_packet.c: 619 in eigrp_read()
________________________________________________________________________________________________________
*** CID 1454333: (STRING_OVERFLOW)
/eigrpd/eigrp_packet.c: 618 in eigrp_read()
612 start of the eigrp TLVs */
613 opcode = eigrph->opcode;
614
615 if (IS_DEBUG_EIGRP_TRANSMIT(0, RECV)) {
616 char src[100], dst[100];
617
>>> CID 1454333: (STRING_OVERFLOW)
>>> You might overrun the 100-character fixed-size string "src" by copying the return value of "inet_ntoa" without checking the length.
618 strcpy(src, inet_ntoa(iph->ip_src));
619 strcpy(dst, inet_ntoa(iph->ip_dst));
620 zlog_debug("Received [%s][%d/%d] length [%u] via [%s] src [%s] dst [%s]",
621 lookup_msg(eigrp_packet_type_str, opcode, NULL),
622 ntohl(eigrph->sequence), ntohl(eigrph->ack), length,
623 IF_NAME(ei), src, dst);
/eigrpd/eigrp_packet.c: 619 in eigrp_read()
613 opcode = eigrph->opcode;
614
615 if (IS_DEBUG_EIGRP_TRANSMIT(0, RECV)) {
616 char src[100], dst[100];
617
618 strcpy(src, inet_ntoa(iph->ip_src));
>>> CID 1454333: (STRING_OVERFLOW)
>>> You might overrun the 100-character fixed-size string "dst" by copying the return value of "inet_ntoa" without checking the length.
619 strcpy(dst, inet_ntoa(iph->ip_dst));
620 zlog_debug("Received [%s][%d/%d] length [%u] via [%s] src [%s] dst [%s]",
621 lookup_msg(eigrp_packet_type_str, opcode, NULL),
622 ntohl(eigrph->sequence), ntohl(eigrph->ack), length,
623 IF_NAME(ei), src, dst);
624 }
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRa7dJ8klHLUFWVd2fqpS-2B-2FHaN43B-2FQ11ntcKmbKat2WeHs8691VOJpZofPkpp-2BRBqc-3D_d-2Fi2nRutHp-2FDWtw8JRg-2Bc1m9CS4-2B5uVbodfDyLsp-2FJl5TsTc9P6rj9eqw3Z9hwZpJJfmWfgw9BgP3MMQbyrq3rafjgR2Qxw-2BaAP69PcFpG1UyC9NOoRm6FO-2Fqc82yPGTT21P3iKikiCqQ8BmaGEoRKQ1wvjspnhYA6IFwJulh-2BO-2BS4lPOSXBIo8P77doV0SEUseHdIg5pPNgiVPklBTp7g-3D-3D
To manage Coverity Scan email notifications for "frr at lists.nox.tf", click https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRbVDbis712qZDP-2FA8y06Nq4lcTWm1Zma8LQDNpOYqrETKrqBiM18kcBcL8b08LzBPOYJYGySZ4Vv7d5QYcnSbGxl3QyORKgEmDxh-2BE2mj6dp1V4JSs2jbMZuLnEQJOW0Z0-3D_d-2Fi2nRutHp-2FDWtw8JRg-2Bc1m9CS4-2B5uVbodfDyLsp-2FJl5TsTc9P6rj9eqw3Z9hwZpJUzubqdF8JQO-2F8ERhX-2FcFV-2BZLLZhyjT6u1iR7c7YvN6taelp3U3QlE3SpmWLCnutqVefZiD49LbAy48Frof6TH67-2Ff0Zptp6sxFhfYGh55OimPX6WK-2BwpyknPKHYAum8P7wmHu-2B-2F558aXBBv6W-2BDeQ-3D-3D
More information about the dev
mailing list