[Gluster-devel] New Defects reported by Coverity Scan for gluster/glusterfs

scan-admin at coverity.com scan-admin at coverity.com
Wed Apr 1 06:28:42 UTC 2015


Hi,

Please find the latest report on new defect(s) introduced to gluster/glusterfs found with Coverity Scan.

22 new defect(s) introduced to gluster/glusterfs found with Coverity Scan.
40 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan
Showing 20 of 22 defect(s)


** CID 1292644:  Insecure data handling  (TAINTED_SCALAR)


________________________________________________________________________________________________________
*** CID 1292644:  Insecure data handling  (TAINTED_SCALAR)
/glusterfsd/src/glusterfsd.c: 2252 in main()
2246     	THIS->ctx = ctx;
2247     
2248             ret = glusterfs_ctx_defaults_init (ctx);
2249             if (ret)
2250                     goto out;
2251     
>>>     CID 1292644:  Insecure data handling  (TAINTED_SCALAR)
>>>     Passing tainted variable "argv" to a tainted sink.
2252             ret = parse_cmdline (argc, argv, ctx);
2253             if (ret)
2254                     goto out;
2255             cmd = &ctx->cmd_args;
2256             if (cmd->print_netgroups) {
2257                     /* If this option is set we want to print & verify the file,


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/987?tab=overview

To manage Coverity Scan email notifications for "gluster-devel at gluster.org", click https://scan.coverity.com/subscriptions/edit?email=gluster-devel%40gluster.org&token=7dffab14bc5a7180e75b0d047539f148 .



More information about the Gluster-devel mailing list