[dev] New Defects reported by Coverity Scan for freerangerouting/frr

scan-admin at coverity.com scan-admin at coverity.com
Wed Jan 17 19:26:47 EST 2018


Hi,

Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.

1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.


New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)


** CID 1464192:  Insecure data handling  (INTEGER_OVERFLOW)
/vtysh/vtysh.c: 204 in vtysh_client_run()


________________________________________________________________________________________________________
*** CID 1464192:  Insecure data handling  (INTEGER_OVERFLOW)
/vtysh/vtysh.c: 204 in vtysh_client_run()
198     		}
199     
200     		/* else if no callback, dump raw */
201     		if (!callback) {
202     			if (fp)
203     				fwrite(buf, 1, textlen, fp);
>>>     CID 1464192:  Insecure data handling  (INTEGER_OVERFLOW)
>>>     Overflowed or truncated value (or a value computed from an overflowed or truncated value) "bufvalid - buf - textlen" used as critical argument to function.
204     			memmove(buf, buf + textlen, bufvalid - buf - textlen);
205     			bufvalid -= textlen;
206     		}
207     
208     		if (bufvalid == buf + bufsz) {
209     			char *new;


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRa7dJ8klHLUFWVd2fqpS-2B-2FHaN43B-2FQ11ntcKmbKat2WeHs8691VOJpZofPkpp-2BRBqc-3D_d-2Fi2nRutHp-2FDWtw8JRg-2Bc1m9CS4-2B5uVbodfDyLsp-2FJmPkP6CfrNP-2B7RpCZWLlqtAXAbb8-2BoheRv-2BadD5YrjY72eEWGxW8e9PCxtJIrzCRUloYR-2BGYrdYTcMOcYRQKpE4rEpSg9SXJT9ENwpD6uhKmNyuHCS8VJvawLaNlyt-2FpnG0KezubulPvVHG79T1gq5vTBXyFN-2B3ji51pL9nor7MlQ-3D-3D

To manage Coverity Scan email notifications for "frr at lists.nox.tf", click https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRbVDbis712qZDP-2FA8y06Nq4lcTWm1Zma8LQDNpOYqrETKrqBiM18kcBcL8b08LzBPOYJYGySZ4Vv7d5QYcnSbGxl3QyORKgEmDxh-2BE2mj6dp1V4JSs2jbMZuLnEQJOW0Z0-3D_d-2Fi2nRutHp-2FDWtw8JRg-2Bc1m9CS4-2B5uVbodfDyLsp-2FJmPkP6CfrNP-2B7RpCZWLlqtAxYy0v6rAAeaYWFTNiQldPB4pBHxhZddYzGdgGy0oJtjFjmK39ejEdGKkCvETih1m2OIrtU0urvuXKnljDOs-2B9pxBhb5zFXMuLW1iwLvDgGHPoM3TqvCNfN6whJdA2tXLYk0NTfs4fFPoWjLSxRaKlQ-3D-3D




More information about the dev mailing list