New Defects reported by Coverity Scan for alfred - linux-merge - lists.open-mesh.org

24 Jun 2014


      Hi,
Please find the latest report on new defect(s) introduced to alfred found with Coverity Scan.
Defect(s) Reported-by: Coverity Scan
Showing 2 of 2 defect(s)
** CID 68431:  Out-of-bounds read  (OVERRUN)
/gpsd/alfred-gpsd.c: 321 in gpsd_read_gpsd()
** CID 68432:  Out-of-bounds access  (OVERRUN)
/gpsd/alfred-gpsd.c: 470 in gpsd_server()
________________________________________________________________________________________________________
*** CID 68431:  Out-of-bounds read  (OVERRUN)
/gpsd/alfred-gpsd.c: 321 in gpsd_read_gpsd()
315     			return;
316     		}
317     
318     		if (buf[cnt] == '\r')
319     			cnt--;
320
...
...
...
CID 68431:  Out-of-bounds read  (OVERRUN)
Overrunning array "buf" of 4096 bytes at byte offset 4294967295 using index "cnt" (which evaluates to 4294967295).

321     		if (buf[cnt] == '\n') {
322     			eol = true;
323     			buf[cnt] = '\0';
324     			break;
325     		}
326     	} while (cnt++ < sizeof(buf) - 1);
________________________________________________________________________________________________________
*** CID 68432:  Out-of-bounds access  (OVERRUN)
/gpsd/alfred-gpsd.c: 470 in gpsd_server()
464     	globals->push->header.version = ALFRED_VERSION;
465     	globals->push->tx.id = 0;
466     	globals->push->tx.seqno = 0;
467     	globals->push->data->header.type = GPSD_PACKETTYPE;
468     	globals->push->data->header.version = GPSD_PACKETVERSION;
469
...
...
...
CID 68432:  Out-of-bounds access  (OVERRUN)
Overrunning array "globals->gpsd_data->tpv" of 65532 bytes by passing it to a function which accesses it at byte offset 4294967292 using argument "4294967275U".

470     	strncpy(globals->gpsd_data->tpv, GPSD_INIT_TPV, tpv_size);
471     	globals->gpsd_data->tpv[tpv_size - 1] = '\0';
472     	globals->gpsd_data->tpv_len =
473     		htonl(strlen(globals->gpsd_data->tpv) + 1);
474     
475     	/* If we have a static location, we don't need to update very
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, http://scan.coverity.com/projects/2296?tab=overview
To unsubscribe from the email notification for new defects, http://scan5.coverity.com/cgi-bin/unsubscribe.py