New Defects reported by Coverity Scan for freerangerouting/frr
scan-admin at coverity.com
scan-admin at coverity.com
Mon Jul 22 12:21:59 UTC 2024
Hi,
Please find the latest report on new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
2 new defect(s) introduced to freerangerouting/frr found with Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 2 of 2 defect(s)
** CID 1598496: (USE_AFTER_FREE)
/bgpd/bgp_evpn.c: 6344 in bgp_evpn_free()
/bgpd/bgp_evpn.c: 6344 in bgp_evpn_free()
________________________________________________________________________________________________________
*** CID 1598496: (USE_AFTER_FREE)
/bgpd/bgp_evpn.c: 6344 in bgp_evpn_free()
6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest;
6339 dest = dest_next) {
6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
6341 if (dest->za_vpn == vpn) {
6342 bgp_path_info_unlock(dest->za_bgp_pi);
6343 bgp_dest_unlock_node(dest);
>>> CID 1598496: (USE_AFTER_FREE)
>>> Calling "zebra_announce_del" dereferences freed pointer "dest".
6344 zebra_announce_del(&bm->zebra_announce_head, dest);
6345 }
6346 }
6347
6348 bgp_evpn_remote_ip_hash_destroy(vpn);
6349 bgp_evpn_vni_es_cleanup(vpn);
/bgpd/bgp_evpn.c: 6344 in bgp_evpn_free()
6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest;
6339 dest = dest_next) {
6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
6341 if (dest->za_vpn == vpn) {
6342 bgp_path_info_unlock(dest->za_bgp_pi);
6343 bgp_dest_unlock_node(dest);
>>> CID 1598496: (USE_AFTER_FREE)
>>> Passing freed pointer "dest" as an argument to "zebra_announce_del".
6344 zebra_announce_del(&bm->zebra_announce_head, dest);
6345 }
6346 }
6347
6348 bgp_evpn_remote_ip_hash_destroy(vpn);
6349 bgp_evpn_vni_es_cleanup(vpn);
/bgpd/bgp_evpn.c: 6344 in bgp_evpn_free()
6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest;
6339 dest = dest_next) {
6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
6341 if (dest->za_vpn == vpn) {
6342 bgp_path_info_unlock(dest->za_bgp_pi);
6343 bgp_dest_unlock_node(dest);
>>> CID 1598496: (USE_AFTER_FREE)
>>> Calling "zebra_announce_del" dereferences freed pointer "dest".
6344 zebra_announce_del(&bm->zebra_announce_head, dest);
6345 }
6346 }
6347
6348 bgp_evpn_remote_ip_hash_destroy(vpn);
6349 bgp_evpn_vni_es_cleanup(vpn);
/bgpd/bgp_evpn.c: 6344 in bgp_evpn_free()
6338 for (dest = zebra_announce_first(&bm->zebra_announce_head); dest;
6339 dest = dest_next) {
6340 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
6341 if (dest->za_vpn == vpn) {
6342 bgp_path_info_unlock(dest->za_bgp_pi);
6343 bgp_dest_unlock_node(dest);
>>> CID 1598496: (USE_AFTER_FREE)
>>> Passing freed pointer "dest" as an argument to "zebra_announce_del".
6344 zebra_announce_del(&bm->zebra_announce_head, dest);
6345 }
6346 }
6347
6348 bgp_evpn_remote_ip_hash_destroy(vpn);
6349 bgp_evpn_vni_es_cleanup(vpn);
** CID 1598495: (USE_AFTER_FREE)
/bgpd/bgpd.c: 3959 in bgp_delete()
/bgpd/bgpd.c: 3959 in bgp_delete()
________________________________________________________________________________________________________
*** CID 1598495: (USE_AFTER_FREE)
/bgpd/bgpd.c: 3959 in bgp_delete()
3953 dest = dest_next) {
3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
3955 dest_table = bgp_dest_table(dest);
3956 if (dest_table->bgp == bgp) {
3957 bgp_path_info_unlock(dest->za_bgp_pi);
3958 bgp_dest_unlock_node(dest);
>>> CID 1598495: (USE_AFTER_FREE)
>>> Calling "zebra_announce_del" dereferences freed pointer "dest".
3959 zebra_announce_del(&bm->zebra_announce_head, dest);
3960 }
3961 }
3962
3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head);
3964 if (BGP_DEBUG(zebra, ZEBRA))
/bgpd/bgpd.c: 3959 in bgp_delete()
3953 dest = dest_next) {
3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
3955 dest_table = bgp_dest_table(dest);
3956 if (dest_table->bgp == bgp) {
3957 bgp_path_info_unlock(dest->za_bgp_pi);
3958 bgp_dest_unlock_node(dest);
>>> CID 1598495: (USE_AFTER_FREE)
>>> Calling "zebra_announce_del" dereferences freed pointer "dest".
3959 zebra_announce_del(&bm->zebra_announce_head, dest);
3960 }
3961 }
3962
3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head);
3964 if (BGP_DEBUG(zebra, ZEBRA))
/bgpd/bgpd.c: 3959 in bgp_delete()
3953 dest = dest_next) {
3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
3955 dest_table = bgp_dest_table(dest);
3956 if (dest_table->bgp == bgp) {
3957 bgp_path_info_unlock(dest->za_bgp_pi);
3958 bgp_dest_unlock_node(dest);
>>> CID 1598495: (USE_AFTER_FREE)
>>> Passing freed pointer "dest" as an argument to "zebra_announce_del".
3959 zebra_announce_del(&bm->zebra_announce_head, dest);
3960 }
3961 }
3962
3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head);
3964 if (BGP_DEBUG(zebra, ZEBRA))
/bgpd/bgpd.c: 3959 in bgp_delete()
3953 dest = dest_next) {
3954 dest_next = zebra_announce_next(&bm->zebra_announce_head, dest);
3955 dest_table = bgp_dest_table(dest);
3956 if (dest_table->bgp == bgp) {
3957 bgp_path_info_unlock(dest->za_bgp_pi);
3958 bgp_dest_unlock_node(dest);
>>> CID 1598495: (USE_AFTER_FREE)
>>> Passing freed pointer "dest" as an argument to "zebra_announce_del".
3959 zebra_announce_del(&bm->zebra_announce_head, dest);
3960 }
3961 }
3962
3963 cnt_after = zebra_announce_count(&bm->zebra_announce_head);
3964 if (BGP_DEBUG(zebra, ZEBRA))
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://u15810271.ct.sendgrid.net/ls/click?upn=u001.AxU2LYlgjL6eX23u9ErQy-2BKADyCpvUKOL6EWmZljiu4jkWudbux5UNqYsSt9ZXO3s9m3KMDrlSX-2Bp41IzjejfmdC2hinnLY-2BZ6PvlTenLZs-3DDZv0_t0zeZlCsA34Fiw17aIfmh-2F3kFs1q7rysihvAefHXY7-2BXsts4RulL9oo9TnRyLsDp7VH-2FnMzFZvLAW7mC0ZyGcPsk5rHgnOtoL3PjZevGbY-2BTniYInYdVEf-2BYvmd2NJ9TElrlTqdmzJ7pDlpaffexTuwM6tegfPiyRnTGKDjQ3zrzUE2D2G7g1ZFlLsCyvZKUuxwoxJUQ23nKihkAkUeb3A-3D-3D
More information about the dev
mailing list