Uploaded image for project: 'Fast Datapath Product'
  1. Fast Datapath Product
  2. FDP-1118

Use after free in ovsdb

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • None
    • rhel-9
    • openvswitch3.5
    • 1
    • False
    • Hide

      None

      Show
      None
    • False
    • Hide

      Given a duplicate database configuration is loaded into ovsdb,

      When the configuration replacement logic is executed,

      Then the system must not access or log a pointer that has already been freed.

      Show
      Given a duplicate database configuration is loaded into ovsdb, When the configuration replacement logic is executed, Then the system must not access or log a pointer that has already been freed.
    • openvswitch3.5-3.5.0-0.21.el9fdp
    • rhel-10
    • None
    • rhel-net-ovs-dpdk
    • ssg_networking
    • OVS/DPDK - FDP-25.B
    • 1

      Scanhub found the following issue

       3. ovsdb/ovsdb-server.c:505:5:
 freed_arg: "shash_replace_nocopy" frees "filename".
6. ovsdb/ovsdb-server.c:507:9:
 pass_freed_arg: Passing freed pointer "filename" as an argument to 
"vlog".
 #   505|       conf = shash_replace_nocopy(db_conf, filename, conf);
 #   506|       if (conf) {
 #   507|->         VLOG_WARN("Duplicate database configuration: %s", filename);
 #   508|           db_config_destroy(conf);
 #   509|       }

      This appears to be a true positive.

          There are no Sub-Tasks for this issue.

              rh-ee-mpattric Mike Pattrick
              rh-ee-mpattric Mike Pattrick
              Hekai Wang Hekai Wang
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: