Attachment 580658 Details for Bug 747966 – Added defects in openswan-2.6.32-14

Added defects in openswan-2.6.32-14

openswan.added (text/plain), 14.45 KB, created by Pavel Raiskup on 2012-04-27 07:08:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Pavel Raiskup

Created: 2012-04-27 07:08:12 UTC

Size: 14.45 KB

patch

obsolete

>csdiff -z                                                                   \
>../20120307/RHEL-6.3/openswan-2.6.32-13.el6/run1/openswan-2.6.32-13.el6.err \
>../20120422/RHEL-6.3/openswan-2.6.32-14.el6/run1/openswan-2.6.32-14.el6.err
>
>Error: FORWARD_NULL:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1179: var_compare_op: Comparing "narrowed_tsi" to null implies that "narrowed_tsi" might be null.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1192: var_deref_op: Dereferencing null variable "narrowed_tsi".
>
>Error: FORWARD_NULL:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1179: var_compare_op: Comparing "result" to null implies that "result" might be null.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1188: var_deref_model: Passing null variable "result" to function "ikev2_create_narrowed_con", which dereferences it.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:971: deref_parm_in_call: Function "ikev2_narrow_instantiate" dereferences parameter "c".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/connections.c:1702: deref_parm: Directly dereferencing parameter "c".
>
>Error: NEGATIVE_RETURNS:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_parent.c:2068: negative_return_fn: Function "ikev2_parse_ts(tsi_pd, tsi, 16U)" returns a negative number.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:420: return_negative_constant: Explicitly returning negative value "-1".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_parent.c:2068: var_assign: Assigning: unsigned variable "tsi_n" = "ikev2_parse_ts".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_parent.c:2074: negative_returns: "tsi_n" is passed to a parameter that cannot be negative.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:357: parm_loop_bound: Using unsigned parameter "ntsi" in a loop exit test.
>
>Error: NEGATIVE_RETURNS:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_parent.c:2069: negative_return_fn: Function "ikev2_parse_ts(tsr_pd, tsr, 16U)" returns a negative number.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:420: return_negative_constant: Explicitly returning negative value "-1".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_parent.c:2069: var_assign: Assigning: unsigned variable "tsr_n" = "ikev2_parse_ts".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_parent.c:2074: negative_returns: "tsr_n" is passed to a parameter that cannot be negative.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:381: parm_loop_bound: Using unsigned parameter "ntsr" in a loop exit test.
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1099: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1106: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1108: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1110: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1112: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1122: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1129: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1131: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1133: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:1135: overrun-buffer-arg: Overrunning static array "buftest" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:944: overrun-buffer-arg: Overrunning static array "hbi" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: OVERRUN_STATIC:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:944: overrun-buffer-arg: Overrunning static array "lbi" of size 73 bytes by passing it to a function which indexes it with argument "73UL" at byte position 73.
>/builddir/build/BUILD/openswan-2.6.32/linux/net/ipsec/addrtot.c:82: access_dbuff_in_call: Calling "strncat" indexes array "dst" with index "dstlen".
>
>Error: RESOURCE_LEAK:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:137: alloc_fn: Calling allocation function "alloc_bytes2".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: alloc_fn: Storage is returned from allocation function "alloc_bytes1".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: alloc_fn: Storage is returned from allocation function "malloc".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: var_assign: Assigning: "p" = "malloc(size)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:125: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: var_assign: Assigning: "p" = "alloc_bytes1(size, name, leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:209: noescape: Variable "p" is not freed or pointed-to in function "memset".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:210: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:137: var_assign: Assigning: "curts" =  storage returned from "alloc_bytes2(72UL, "struct traffic_selector", leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:147: var_assign: Assigning: "prevts" = "curts".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:148: overwrite_var: Overwriting "curts" in call "curts = curts->next" leaks the storage that "curts" points to.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:151: overwrite_var: Overwriting "prevts" in call "prevts = NULL" leaks the storage that "prevts" points to.
>
>Error: RESOURCE_LEAK:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:137: alloc_fn: Calling allocation function "alloc_bytes2".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: alloc_fn: Storage is returned from allocation function "alloc_bytes1".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: alloc_fn: Storage is returned from allocation function "malloc".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: var_assign: Assigning: "p" = "malloc(size)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:125: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: var_assign: Assigning: "p" = "alloc_bytes1(size, name, leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:209: noescape: Variable "p" is not freed or pointed-to in function "memset".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:210: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:137: var_assign: Assigning: "curts" =  storage returned from "alloc_bytes2(72UL, "struct traffic_selector", leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:147: var_assign: Assigning: "prevts" = "curts".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:148: overwrite_var: Overwriting "curts" in call "curts = curts->next" leaks the storage that "curts" points to.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:147: overwrite_var: Overwriting "prevts" in call "prevts = curts" leaks the storage that "prevts" points to.
>
>Error: RESOURCE_LEAK:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:156: alloc_fn: Calling allocation function "alloc_bytes2".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: alloc_fn: Storage is returned from allocation function "alloc_bytes1".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: alloc_fn: Storage is returned from allocation function "malloc".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: var_assign: Assigning: "p" = "malloc(size)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:125: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: var_assign: Assigning: "p" = "alloc_bytes1(size, name, leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:209: noescape: Variable "p" is not freed or pointed-to in function "memset".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:210: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:156: var_assign: Assigning: "curts" =  storage returned from "alloc_bytes2(72UL, "struct traffic_selector", leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:166: var_assign: Assigning: "prevts" = "curts".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:167: overwrite_var: Overwriting "curts" in call "curts = curts->next" leaks the storage that "curts" points to.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:166: overwrite_var: Overwriting "prevts" in call "prevts = curts" leaks the storage that "prevts" points to.
>
>Error: RESOURCE_LEAK:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:156: alloc_fn: Calling allocation function "alloc_bytes2".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: alloc_fn: Storage is returned from allocation function "alloc_bytes1".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: alloc_fn: Storage is returned from allocation function "malloc".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:99: var_assign: Assigning: "p" = "malloc(size)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:125: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:201: var_assign: Assigning: "p" = "alloc_bytes1(size, name, leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:209: noescape: Variable "p" is not freed or pointed-to in function "memset".
>/builddir/build/BUILD/openswan-2.6.32/lib/libopenswan/alloc.c:210: return_alloc: Returning allocated memory "p".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:156: var_assign: Assigning: "curts" =  storage returned from "alloc_bytes2(72UL, "struct traffic_selector", leak_detective)".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:166: var_assign: Assigning: "prevts" = "curts".
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:167: overwrite_var: Overwriting "curts" in call "curts = curts->next" leaks the storage that "curts" points to.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:169: leaked_storage: Variable "prevts" going out of scope leaks the storage it points to.
>
>Error: UNINIT:
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:705: var_decl: Declaring variable "tmp2" without initializer.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:801: uninit_use: Using uninitialized value "tmp2": field "tmp2".next is uninitialized.
>/builddir/build/BUILD/openswan-2.6.32/programs/pluto/ikev2_child.c:902: uninit_use: Using uninitialized value "tmp2": field "tmp2".next is uninitialized.

Actions: View

Attachments on bug 747966: 580658 | 580659