New Defects reported by Coverity Scan for freerangerouting/frr

scan-admin at coverity.com scan-admin at coverity.com
Tue Apr 18 21:19:36 UTC 2023


Hi,

Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.

4 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.


New defect(s) Reported-by: Coverity Scan
Showing 4 of 4 defect(s)


** CID 1560315:  Null pointer dereferences  (NULL_RETURNS)
/isisd/isis_affinitymap.c: 49 in isis_affinity_map_update()


________________________________________________________________________________________________________
*** CID 1560315:  Null pointer dereferences  (NULL_RETURNS)
/isisd/isis_affinitymap.c: 49 in isis_affinity_map_update()
43     	struct isis *isis = isis_lookup_by_vrfid(VRF_DEFAULT);
44     	struct listnode *area_node, *fa_node;
45     	struct isis_area *area;
46     	struct flex_algo *fa;
47     	bool changed;
48     
>>>     CID 1560315:  Null pointer dereferences  (NULL_RETURNS)
>>>     Dereferencing "isis", which is known to be "NULL".
49     	for (ALL_LIST_ELEMENTS_RO(isis->area_list, area_node, area)) {
50     		changed = false;
51     		for (ALL_LIST_ELEMENTS_RO(area->flex_algos->flex_algos, fa_node,
52     					  fa)) {
53     			if (admin_group_get(&fa->admin_group_exclude_any,
54     					    old_pos)) {

** CID 1560314:  Incorrect expression  (NO_EFFECT)
/isisd/isisd.c: 3147 in area_resign_level()


________________________________________________________________________________________________________
*** CID 1560314:  Incorrect expression  (NO_EFFECT)
/isisd/isisd.c: 3147 in area_resign_level()
3141     
3142     #ifndef FABRICD
3143     	for (int tree = SPFTREE_IPV4; tree < SPFTREE_COUNT; tree++) {
3144     		for (ALL_LIST_ELEMENTS_RO(area->flex_algos->flex_algos, node,
3145     					  fa)) {
3146     			data = fa->data;
>>>     CID 1560314:  Incorrect expression  (NO_EFFECT)
>>>     Comparing an array to null is not useful: "data->spftree[level - 1]", since the test will always evaluate as true.
3147     			if (data->spftree[level - 1]) {
3148     				isis_spftree_del(
3149     					data->spftree[tree][level - 1]);
3150     				data->spftree[tree][level - 1] = NULL;
3151     			}
3152     		}

** CID 1560313:  Null pointer dereferences  (NULL_RETURNS)
/isisd/isis_affinitymap.c: 26 in isis_affinity_map_check_use()


________________________________________________________________________________________________________
*** CID 1560313:  Null pointer dereferences  (NULL_RETURNS)
/isisd/isis_affinitymap.c: 26 in isis_affinity_map_check_use()
20     	struct affinity_map *map;
21     	uint16_t pos;
22     
23     	map = affinity_map_get(affmap_name);
24     	pos = map->bit_position;
25     
>>>     CID 1560313:  Null pointer dereferences  (NULL_RETURNS)
>>>     Dereferencing "isis", which is known to be "NULL".
26     	for (ALL_LIST_ELEMENTS_RO(isis->area_list, area_node, area)) {
27     		for (ALL_LIST_ELEMENTS_RO(area->flex_algos->flex_algos, fa_node,
28     					  fa)) {
29     			if (admin_group_get(&fa->admin_group_exclude_any,
30     					    pos) ||
31     			    admin_group_get(&fa->admin_group_include_any,

** CID 1560312:  Memory - corruptions  (OVERRUN)
/isisd/isis_flex_algo.c: 292 in isis_flex_algo_constraint_drop()


________________________________________________________________________________________________________
*** CID 1560312:  Memory - corruptions  (OVERRUN)
/isisd/isis_flex_algo.c: 292 in isis_flex_algo_constraint_drop()
286     	if (link_admin_group && link_ext_admin_group) {
287     		link_ext_admin_group_bitmap0 =
288     			admin_group_get_offset(link_ext_admin_group, 0);
289     		if (*link_admin_group != link_ext_admin_group_bitmap0) {
290     			memcpy(lspid_orig, lsp->hdr.lsp_id,
291     			       ISIS_SYS_ID_LEN + 2);
>>>     CID 1560312:  Memory - corruptions  (OVERRUN)
>>>     Overrunning array "reach->id" of 7 bytes by passing it to a function which accesses it at byte offset 7 using argument "8UL".
292     			memcpy(lspid_neigh, reach->id, ISIS_SYS_ID_LEN + 2);
293     			zlog_warn(
294     				"ISIS-SPF: LSP from %pLS neighbor %pLS. Admin-group 0x%08x differs from ext admin-group 0x%08x.",
295     				lspid_orig, lspid_neigh, *link_admin_group,
296     				link_ext_admin_group_bitmap0);
297     		}


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrtN2DGUU98GYhjd55wXsXtw53zRK70R0agdV-2Fb7c45-2BkxBoZjryQtr5SpUD80NNfE-3Dxl3d_O0IDF7c8sUs2B6kWTeWwAJZqriD5fgsfL8PAN30oQTwYle-2B-2FgzZIvVeY1mlCvzdCZHGkvE0rBCHxb5YsSrkeDw-2FDnOWJ-2B0tRvJ6am14R6mhqQGaHX7J3SCJ5SE2rrAKmfstoMhBnzo8YYRIJijpt5K0M8jpEJvvzShg5hObwCxcuoEoiAvHMZ8cW48PogQsqyF9BdxdrInPogYjgnTAbCVfadwM-2BYuI-2FjAFTQHpbZr8-3D




More information about the dev mailing list