https://bugs.linaro.org/show_bug.cgi?id=2377
Bug ID: 2377
Summary: CID 163606 Out-of-bounds read
Product: OpenDataPlane - linux- generic reference
Version: v1.10
Hardware: Other
OS: Linux
Status: UNCONFIRMED
Severity: enhancement
Priority: ---
Component: queue
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Target Milestone: ---
12. assignment: Assigning: i = 0U.
13. Condition i < num_queues, taking true branch
81 for (i = 0; i < num_queues; i++) {
82 generate_name(name, i);
83 queue[i] = odp_queue_create(name, &qparams);
84
14. Condition queue[i] == NULL, taking true branch
85 if (queue[i] == ODP_QUEUE_INVALID) {
86 CU_FAIL("Queue create failed");
15. assignment: Assigning: num_queues = i - 1U. The value of num_queues
is now 4294967295.
87 num_queues = i - 1;
16. Breaking from loop
88 break;
89 }
90
91 CU_ASSERT(odp_queue_lookup(name) != ODP_QUEUE_INVALID);
92 }
93
17. Condition i < num_queues, taking true branch
20. Condition i < num_queues, taking true branch
21. cond_at_most: Checking i < num_queues implies that i may be up to
4294967294 on the true branch.
94 for (i = 0; i < num_queues; i++)
18. Condition odp_queue_destroy(queue[i]) == 0, taking false branch
19. Jumping back to the beginning of the loop
CID 163606 (#1 of 1): Out-of-bounds read (OVERRUN)
22. overrun-local: Overrunning array queue of 65536 8-byte elements at element
index 4294967294 (byte offset 34359738352) using index i (which evaluates to
4294967294).
--
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
lng-odp mailing list
[email protected]
https://lists.linaro.org/mailman/listinfo/lng-odp
