Skip to content

CDI 1518564: Out-of-bounds write #10365

@maskit

Description

@maskit

fq_pacing.cc

62  f = TSfopen("/proc/sys/net/core/default_qdisc", "r");
   	1. Condition !f, taking false branch.
 63  if (!f) {
 64    return 0;
 65  }
 66
   	2. identity_transfer: Passing 5UL as argument 3 to function TSfread, which returns that argument. [[show details](https://scan6.scan.coverity.com/eventId=34759729-2&modelId=34759729-0&fileInstanceId=164123272&filePath=%2Fsrc%2Ftraffic_server%2FInkAPI.cc&fileStart=1945&fileEnd=1949)]
   	3. assignment: Assigning: s = tsapi::c::TSfread(f, buffer, 5UL). The value of s is now 5.
 67  s = TSfread(f, buffer, sizeof(buffer));
   	4. Condition s > 0, taking true branch.
 68  if (s > 0) {
   	
CID 1518564 (#1 of 1): Out-of-bounds write (OVERRUN)
5. overrun-local: Overrunning array buffer of 5 bytes at byte offset 5 using index s (which evaluates to 5).
 69    buffer[s] = 0;
 70  } else {
 71    TSfclose(f);
 72    return 0;
 73  }

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions