[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 28 Oct 2015 03:14:04 +0100
From: Hannes Frederic Sowa <hannes@...essinduktion.org>
To: Stephen Hemminger <stephen@...workplumber.org>,
netdev@...r.kernel.org
Subject: Re: new coverity defect in ipv6 route
Hi Stephen,
On Wed, Oct 28, 2015, at 01:43, Stephen Hemminger wrote:
________________________________________________________________________________________________________
> *** CID 1328821: Memory - corruptions (ARRAY_VS_SINGLETON)
> /net/ipv6/route.c: 320 in rt6_info_init()
> 314 #endif
> 315
> 316 static void rt6_info_init(struct rt6_info *rt)
> 317 {
> 318 struct dst_entry *dst = &rt->dst;
> 319
> >>> CID 1328821: Memory - corruptions (ARRAY_VS_SINGLETON)
> >>> Using "dst" as an array. This might corrupt or misinterpret adjacent memory locations.
> 320 memset(dst + 1, 0, sizeof(*rt) - sizeof(*dst));
> 321 INIT_LIST_HEAD(&rt->rt6i_siblings);
> 322 INIT_LIST_HEAD(&rt->rt6i_uncached);
> 323 }
> 324
> 325 /* allocate dst with ip6_dst_ops */
I already marked this as an false positive in coverity.
Thanks,
Hannes
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists