[dev] New Defects reported by Coverity Scan for freerangerouting/frr
scan-admin at coverity.com
scan-admin at coverity.com
Sat Oct 6 03:51:38 EDT 2018
Hi,
Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
3 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 1473939: Security best practices violations (DC.WEAK_CRYPTO)
/watchfrr/watchfrr.c: 983 in watchfrr_init()
________________________________________________________________________________________________________
*** CID 1473939: Security best practices violations (DC.WEAK_CRYPTO)
/watchfrr/watchfrr.c: 983 in watchfrr_init()
977 dmn->name = dmn->restart.name = argv[i];
978 dmn->state = DAEMON_INIT;
979 gs.numdaemons++;
980 gs.numdown++;
981 dmn->fd = -1;
982 dmn->t_wakeup = NULL;
>>> CID 1473939: Security best practices violations (DC.WEAK_CRYPTO)
>>> "random" should not be used for security related applications, as linear congruential algorithms are too easy to break.
983 thread_add_timer_msec(master, wakeup_init, dmn,
984 100 + (random() % 900),
985 &dmn->t_wakeup);
986 dmn->restart.interval = gs.min_restart_interval;
987 *add = dmn;
988 add = &dmn->next;
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V05UPxvVjWch-2Bd2MGckcRa7dJ8klHLUFWVd2fqpS-2B-2FHaN43B-2FQ11ntcKmbKat2WeHs8691VOJpZofPkpp-2BRBqc-3D_d-2Fi2nRutHp-2FDWtw8JRg-2Bc1m9CS4-2B5uVbodfDyLsp-2FJnXl-2BLCc5cLbmGZcUvuZNxwJoD8SLEpakwit467kIjhSRuAYKyLRXTYdqck-2FR5CDI04q-2FPNRF15SOEAi820dja2dw0HuigcLaLWShKmfD3iWrKW6R1kzFSoRFuXc2AmH1Zcc29P6G15jcU-2F7fiYmKF-2FqcLt-2FReRJQWWYeJuL7jx-2Fg-3D-3D
More information about the dev
mailing list