[Gluster-devel] Fwd: New Defects reported by Coverity Scan for GlusterFS

Vijay Bellur vbellur at redhat.com
Thu Dec 25 06:39:33 UTC 2014


A single bug reported by covscan this time.

KP, Kaushal - can you please check this out?

Thanks,
Vijay


-------- Forwarded Message --------
Subject: New Defects reported by Coverity Scan for GlusterFS
Date: Wed, 24 Dec 2014 01:55:19 -0800
From: scan-admin at coverity.com
To: vbellur at redhat.com


Hi,

Please find the latest report on new defect(s) introduced to GlusterFS 
found with Coverity Scan.

1 new defect(s) introduced to GlusterFS found with Coverity Scan.
14 defect(s), reported by Coverity Scan earlier, were marked fixed in 
the recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)


** CID 1260432:  Out-of-bounds access  (OVERRUN)
/xlators/mgmt/glusterd/src/glusterd.c: 1323 in glusterd_stop_uds_listener()


________________________________________________________________________________________________________
*** CID 1260432:  Out-of-bounds access  (OVERRUN)
/xlators/mgmt/glusterd/src/glusterd.c: 1323 in glusterd_stop_uds_listener()
1317             (void) rpcsvc_unregister_notify (conf->uds_rpc,
1318 
glusterd_uds_rpcsvc_notify,
1319                                              this);
1320
1321             sock_data = dict_get (this->options, "glusterd-sockfile");
1322             if (!sock_data) {
>>>     CID 1260432:  Out-of-bounds access  (OVERRUN)
>>>     Overrunning array "sockfile" of 109 bytes by passing it to a function which accesses it at byte offset 4095 using argument "4096UL".
1323                     strncpy (sockfile, DEFAULT_GLUSTERD_SOCKFILE, 
PATH_MAX);
1324             } else {
1325                     strncpy (sockfile, sock_data->data, PATH_MAX);
1326             }
1327             unlink (sockfile);
1328


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, 
http://scan.coverity.com/projects/987?tab=overview

To manage Coverity Scan email notifications for "vbellur at redhat.com", 
click 
http://scan.coverity.com/subscriptions/edit?email=vbellur%40redhat.com&token=5b81d38a8ddcb1eaca7a29dec26cbdcc 
.





More information about the Gluster-devel mailing list