New Defects reported by Coverity Scan for freerangerouting/frr

scan-admin at coverity.com scan-admin at coverity.com
Wed Jun 8 09:12:56 UTC 2022


Hi,

Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.

1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)


** CID 1518122:  Memory - illegal accesses  (OVERRUN)
/ospfd/ospf_api.c: 676 in new_msg_reachable_change()


________________________________________________________________________________________________________
*** CID 1518122:  Memory - illegal accesses  (OVERRUN)
/ospfd/ospf_api.c: 676 in new_msg_reachable_change()
670     	if (nremove > (nmax - nadd))
671     		nremove = (nmax - nadd);
672     
673     	if (nadd)
674     		memcpy(nmsg->router_ids, add, nadd * insz);
675     	if (nremove)
>>>     CID 1518122:  Memory - illegal accesses  (OVERRUN)
>>>     Overrunning array of 1536 bytes at byte offset 1536 by dereferencing pointer "&nmsg->router_ids[nadd]".
676     		memcpy(&nmsg->router_ids[nadd], remove, nremove * insz);
677     
678     	nmsg->nadd = htons(nadd);
679     	nmsg->nremove = htons(nremove);
680     	len = sizeof(*nmsg) + insz * (nadd + nremove);
681     
682     	return msg_new(MSG_REACHABLE_CHANGE, nmsg, seqnum, len);
683     }
684     


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrtN2DGUU98GYhjd55wXsXtw53zRK70R0agdV-2Fb7c45-2BkxBoZjryQtr5SpUD80NNfE-3DuQ8o_O0IDF7c8sUs2B6kWTeWwAJZqriD5fgsfL8PAN30oQTyn22oP9irVAqwnoD9VFwTo05eFsulvMpmEE9hEWe0X5p-2FivPZzyKhEZZ-2B3C9YqRUPx-2B27YRTaXwhtKab5tzqxjjkRw-2B0Lp592yRrgLk6foxMz6QIf5QUXIYxEnjZpCR1LWwF-2FJ-2BNIhzdvTdL-2FQbTL6Epo6-2BI81gNsPeyPvT5D79w-3D-3D




More information about the dev mailing list