https://bugs.linaro.org/show_bug.cgi?id=2253
Bug ID: 2253
Summary: odp_system_info.cCID 161436: Insecure data handling:
Product: OpenDataPlane - linux- generic reference
Version: v1.10
Hardware: Other
OS: Linux
Status: UNCONFIRMED
Severity: enhancement
Priority: ---
Component: General ODP
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
*** CID 161436: Insecure data handling (INTEGER_OVERFLOW)
/platform/linux-generic/odp_system_info.c: 89 in default_huge_page_size()
83 file = fopen("/proc/meminfo", "rt");
84
85 while (fgets(str, sizeof(str), file) != NULL) {
86 if (sscanf(str, "Hugepagesize: %8lu kB", &sz) == 1) {
87 ODP_DBG("defaut hp size is %" PRIu64 " kB\n", sz);
88 fclose(file);
>>> CID 161436: Insecure data handling (INTEGER_OVERFLOW)
>>> Overflowed or truncated value (or a value computed from an overflowed
>>> or truncated value) "(uint64_t)sz * 1024UL" used as return value.
89 return (uint64_t)sz * 1024;
90 }
91 }
92
93 ODP_ERR("unable to get default hp size\n");
94 fclose(file);
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
lng-odp mailing list
[email protected]
https://lists.linaro.org/mailman/listinfo/lng-odp
