New Defects reported by Coverity Scan for freerangerouting/frr

scan-admin at coverity.com scan-admin at coverity.com
Tue Oct 24 23:20:00 UTC 2023


Hi,

Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.

1 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)


** CID 1569357:    (OVERRUN)
/bgpd/bgp_packet.c: 3310 in bgp_dynamic_capability_fqdn()
/bgpd/bgp_packet.c: 3343 in bgp_dynamic_capability_fqdn()


________________________________________________________________________________________________________
*** CID 1569357:    (OVERRUN)
/bgpd/bgp_packet.c: 3310 in bgp_dynamic_capability_fqdn()
3304     			memcpy(&str, data, len);
3305     			str[len] = '\0';
3306     		}
3307     		data += len;
3308     
3309     		if (len) {
>>>     CID 1569357:    (OVERRUN)
>>>     Overrunning array "str" of 65 bytes at byte offset 65 using index "len" (which evaluates to 65).
3310     			str[len] = '\0';
3311     
3312     			XFREE(MTYPE_BGP_PEER_HOST, peer->hostname);
3313     			XFREE(MTYPE_BGP_PEER_HOST, peer->domainname);
3314     
3315     			peer->hostname = XSTRDUP(MTYPE_BGP_PEER_HOST, str);
/bgpd/bgp_packet.c: 3343 in bgp_dynamic_capability_fqdn()
3337     			memcpy(&str, data, len);
3338     			str[len] = '\0';
3339     		}
3340     		data += len;
3341     
3342     		if (len) {
>>>     CID 1569357:    (OVERRUN)
>>>     Overrunning array "str" of 65 bytes at byte offset 65 using index "len" (which evaluates to 65).
3343     			str[len] = '\0';
3344     
3345     			XFREE(MTYPE_BGP_PEER_HOST, peer->domainname);
3346     
3347     			peer->domainname = XSTRDUP(MTYPE_BGP_PEER_HOST, str);
3348     		}


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=HRESupC-2F2Czv4BOaCWWCy7my0P0qcxCbhZ31OYv50yrtN2DGUU98GYhjd55wXsXtw53zRK70R0agdV-2Fb7c45-2BoAJF92cCodBN9BBnDbw-2FFg-3DToJX_O0IDF7c8sUs2B6kWTeWwAJZqriD5fgsfL8PAN30oQTzXnLTZUu7jqmWCrHZFw5hWtpqHB5EpXRiYXCCYrL0oX99xka7BuXJIQE-2BEsJsRw8Ma8CUBkEJqzAXCMsPAhsyRLb7niWs4uIDNPHAhrPA842a2ZxXAJ3FpL7MAjPf-2F1ujD9b-2B7kDCdiRRL5biLZr3UR-2FsRlSh0-2BfQalswIWlwGLw-3D-3D




More information about the dev mailing list