| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |\
| | |
| | | |
Fixes a buffer overflow issue when copying chaddr, file, and sname fields
|
| |/
| |
| |
| | |
the DHCP header.
|
| |\
| | |
| | | |
Fixes a bug that incorrectly converts the addr, mask, and next_hop fields
|
| | |
| | |
| | |
| | | |
network byte order. Users will usually call libnet_name2addr4 to fill these fields and this function already provides a network byte-ordered value.
|
| |\ \
| | | |
| | | | |
Fixes incorrect memory block size set in the timeexceed & redirect builder
|
| | |/
| | |
| | |
| | | |
builders. The n variable does not add the size of the payload (payload_s) for proper allocation of the buffer when payload is not NULL and payload_s is greater than 0. This results in a memcpy buffer overflow error when libnet_pblock_append is called exiting the program.
|
| |\ \
| | |/
| |/| |
Fixes improper calculation of header size in HSRP builder
|
| |/
| |
| |
| | |
called. payload_s must be added to the header length in order to accommodate for the existence of a non-NULL payload. Otherwise the user is prompted with a 'memcpy would cause overflow' error and the program exits.
|
|\ \ |
|
| |\ \ |
|
| | | |
| | | |
| | | |
| | | |
| | | | |
I think this is because of differing versions of Ubuntu; the one on the
build server uses dnet.h still.
|
| | | | |
|
| | | |
| | | |
| | | |
| | | | |
headers.
|
| |_|/
|/| | |
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Coverity noticed that stack garbage was being passed instead of a valid
value, its just that the value isn't used, and incluing l->total_size
is wrong when the pblock is being updated (though it will work on
pblock creation).
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
libnet_build_icmp.c:403: var_decl: Declaring variable "h" without initializer.
libnet_build_icmp.c:433: uninit_use_in_call: Using uninitialized value
"h" when calling "libnet_pblock_update".
libnet_pblock.c:295: read_parm: Reading a parameter value.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
libnet_port_list.c:142: deref_ptr: Directly dereferencing pointer "tmp".
libnet_port_list.c:130: check_after_deref: Dereferencing "tmp" before a null check.
libnet_port_list.c:197: deref_ptr: Directly dereferencing pointer "plist".
libnet_port_list.c:198: check_after_deref: Dereferencing "plist" before a null check.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
libnet_if_addr.c:139: alloc_fn: Calling allocation function "fopen".
libnet_if_addr.c:139: var_assign: Assigning: "fp" = storage returned
from "fopen("/proc/net/dev", "r")".
libnet_if_addr.c:157: leaked_storage: Variable "fp" going out of scope
leaks the storage it points to.
libnet_if_addr.c:227: leaked_storage: Variable "fp" going out of scope
leaks the storage it points to.
libnet_if_addr.c:246: leaked_storage: Variable "fp" going out of scope
leaks the storage it points to.
libnet_if_addr.c:263: leaked_storage: Variable "fp" going out of scope
leaks the storage it points to.
|
| | |
| | |
| | |
| | |
| | | |
libnet_build_cdp.c:162: overrun-buffer-arg: Overrunning struct type struct libnet_cdp_value_hdr of size 4 bytes by passing it to a function which indexes it with argument "8U" at byte position 7.
libnet_pblock.c:278: access_dbuff_in_call: Calling "memcpy" indexes array "buf" with index "len".
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
libnet_build_isl.c:76: overrun-buffer-arg: Overrunning static array
"&isl_hdr.isl_dhost" of size 5 bytes by passing
it to a function which indexes it with argument
"6UL" at byte position 5.
|
| | |
| | |
| | |
| | |
| | |
| | | |
libnet_init.c:74: overrun-local: Overrunning static array "l->label", with 64 elements, at position 64 with index variable "sizeof (l->label) /*64*/"
libnet_cq.c:119: overrun-local: Overrunning static array "l->label", with 64 elements, at position 64 with index variable "64"
libnet_cq.c:150: overrun-local: Overrunning static array "l->label", with 64 elements, at position 64 with index variable "64".
|
| | |
| | |
| | |
| | |
| | | |
libnet_cq.c:177: var_compare_op: Comparing "l" to null implies that "l" might be null.
libnet_cq.c:179: var_deref_model: Passing null variable "l->err_buf" to function "snprintf", which dereferences it.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
libnet_checksum.c:210: assign_zero: Assigning: "iph_p" = 0.
libnet_checksum.c:277: var_deref_model: Passing null variable "(uint16_t *)&iph_p->ip_src" to function "libnet_in_cksum", which dereferences it.
libnet_checksum.c:74: deref_parm: Directly dereferencing parameter "addr".
libnet_checksum.c:307: var_deref_model: Passing null variable "(uint16_t *)&iph_p->ip_src" to function "libnet_in_cksum", which dereferences it.
|
| |/
|/|
| |
| |
| | |
libnet_build_tcp.c: check return value of libnet_pblock_append()
(as is done elsewhere 143 out of 145 times).
|
| | |
|
|/ |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
rep of ct and exp objects.
|
| |
|
|
|
|
| |
about.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
Features include nonblocking, attributes in presentation format and host
numeric order, and some general bug-fixing.
order
|