Skip to content

CDI 1518564: Out-of-bounds write #10365

Description

@maskit

fq_pacing.cc

62  f = TSfopen("/proc/sys/net/core/default_qdisc", "r");
   	1. Condition !f, taking false branch.
 63  if (!f) {
 64    return 0;
 65  }
 66
   	2. identity_transfer: Passing 5UL as argument 3 to function TSfread, which returns that argument. [[show details](https://scan6.scan.coverity.com/eventId=34759729-2&modelId=34759729-0&fileInstanceId=164123272&filePath=%2Fsrc%2Ftraffic_server%2FInkAPI.cc&fileStart=1945&fileEnd=1949)]
   	3. assignment: Assigning: s = tsapi::c::TSfread(f, buffer, 5UL). The value of s is now 5.
 67  s = TSfread(f, buffer, sizeof(buffer));
   	4. Condition s > 0, taking true branch.
 68  if (s > 0) {
   	
CID 1518564 (#1 of 1): Out-of-bounds write (OVERRUN)
5. overrun-local: Overrunning array buffer of 5 bytes at byte offset 5 using index s (which evaluates to 5).
 69    buffer[s] = 0;
 70  } else {
 71    TSfclose(f);
 72    return 0;
 73  }

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions