New Defects reported by Coverity Scan for freerangerouting/frr
scan-admin at coverity.com
scan-admin at coverity.com
Wed Jun 8 09:12:56 UTC 2022
Hi,
Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 1518122: Memory - illegal accesses (OVERRUN)
/ospfd/ospf_api.c: 676 in new_msg_reachable_change()
________________________________________________________________________________________________________
*** CID 1518122: Memory - illegal accesses (OVERRUN)
/ospfd/ospf_api.c: 676 in new_msg_reachable_change()
670 if (nremove > (nmax - nadd))
671 nremove = (nmax - nadd);
672
673 if (nadd)
674 memcpy(nmsg->router_ids, add, nadd * insz);
675 if (nremove)
>>> CID 1518122: Memory - illegal accesses (OVERRUN)
>>> Overrunning array of 1536 bytes at byte offset 1536 by dereferencing pointer "&nmsg->router_ids[nadd]".
676 memcpy(&nmsg->router_ids[nadd], remove, nremove * insz);
677
678 nmsg->nadd = htons(nadd);
679 nmsg->nremove = htons(nremove);
680 len = sizeof(*nmsg) + insz * (nadd + nremove);
681
682 return msg_new(MSG_REACHABLE_CHANGE, nmsg, seqnum, len);
683 }
684
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrtN2DGUU98GYhjd55wXsXtw53zRK70R0agdV-2Fb7c45-2BkxBoZjryQtr5SpUD80NNfE-3DuQ8o_O0IDF7c8sUs2B6kWTeWwAJZqriD5fgsfL8PAN30oQTyn22oP9irVAqwnoD9VFwTo05eFsulvMpmEE9hEWe0X5p-2FivPZzyKhEZZ-2B3C9YqRUPx-2B27YRTaXwhtKab5tzqxjjkRw-2B0Lp592yRrgLk6foxMz6QIf5QUXIYxEnjZpCR1LWwF-2FJ-2BNIhzdvTdL-2FQbTL6Epo6-2BI81gNsPeyPvT5D79w-3D-3D
More information about the dev
mailing list