Hi,
Please find the latest report on new defect(s) introduced to Pike-master found with Coverity Scan.
1 new defect(s) introduced to Pike-master found with Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 1691882: Null pointer dereferences (FORWARD_NULL)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/post_modules/GI/gi.cmod: 4272 in gpoll_interceptor()
_____________________________________________________________________________________________
*** CID 1691882: Null pointer dereferences (FORWARD_NULL)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/post_modules/GI/gi.cmod: 4272 in gpoll_interceptor()
4266 gpoll_allocated_fds = alloc_fds;
4267 }
4268
4269 for (n = 0; n < gpoll_nfds; n++) {
4270 if (n < nfds) {
4271 int pike_events = gevents_to_pike_events(fds[n].events);
>>> CID 1691882: Null pointer dereferences (FORWARD_NULL)
>>> Dereferencing null pointer "gpoll_fd_boxes".
4272 if (gpoll_fd_boxes[n].fd == fds[n].fd) {
4273 continue;
4274 }
4275 }
4276 /* NB: We must unhook the old boxes where the fds mismatch
4277 * first. Otherwise an old fd box may still be active
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/pike-master?tab=overview
Hi,
Please find the latest report on new defect(s) introduced to Pike-master found with Coverity Scan.
1 new defect(s) introduced to Pike-master found with Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 1680319: (CHECKED_RETURN)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/modules/_Image_TIFF/image_tiff.c: 460 in low_image_tiff_decode()
/home/covbuilder/pike/Pike-v9.1-snapshot/src/modules/_Image_TIFF/image_tiff.c: 459 in low_image_tiff_decode()
_____________________________________________________________________________________________
*** CID 1680319: (CHECKED_RETURN)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/modules/_Image_TIFF/image_tiff.c: 460 in low_image_tiff_decode()
454 size_buffer, map_buffer,
455 unmap_buffer);
456 if(!tif)
457 Pike_error("Failed to 'open' tiff image: %s\n", last_tiff_error);
458
459 TIFFGetField(tif, TIFFTAG_IMAGEWIDTH, &w);
>>> CID 1680319: (CHECKED_RETURN)
>>> Calling "TIFFGetField" without checking return value (as is done elsewhere 25 out of 27 times).
460 TIFFGetField(tif, TIFFTAG_IMAGELENGTH, &h);
461
462 if (DO_UINT32_MUL_OVERFLOW(w, h, &pixels)
463 || pixels > 0x7fffffff) {
464 /* There is no need to continue, Image.Image does not support >2G
465 * pixels. */
/home/covbuilder/pike/Pike-v9.1-snapshot/src/modules/_Image_TIFF/image_tiff.c: 459 in low_image_tiff_decode()
453 seek_buffer, close_buffer,
454 size_buffer, map_buffer,
455 unmap_buffer);
456 if(!tif)
457 Pike_error("Failed to 'open' tiff image: %s\n", last_tiff_error);
458
>>> CID 1680319: (CHECKED_RETURN)
>>> Calling "TIFFGetField" without checking return value (as is done elsewhere 25 out of 27 times).
459 TIFFGetField(tif, TIFFTAG_IMAGEWIDTH, &w);
460 TIFFGetField(tif, TIFFTAG_IMAGELENGTH, &h);
461
462 if (DO_UINT32_MUL_OVERFLOW(w, h, &pixels)
463 || pixels > 0x7fffffff) {
464 /* There is no need to continue, Image.Image does not support >2G
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/pike-master?tab=overview
Hi,
Please find the latest report on new defect(s) introduced to Pike-master found with Coverity Scan.
1 new defect(s) introduced to Pike-master found with Coverity Scan.
1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 1641415: (INTEGER_OVERFLOW)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3472 in pike_writev()
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3497 in pike_writev()
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3479 in pike_writev()
________________________________________________________________________________________________________
*** CID 1641415: (INTEGER_OVERFLOW)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3472 in pike_writev()
3466 #endif
3467
3468 #ifdef MAX_IOVEC
3469 if (cnt > MAX_IOVEC) cnt = MAX_IOVEC;
3470 #endif
3471
>>> CID 1641415: (INTEGER_OVERFLOW)
>>> "iov->iov_len", which might have underflowed, is passed to "writev(fd, iov, cnt)".
3472 bytes = fd_writev(fd, iov, cnt);
3473
3474 if (bytes < 0) {
3475 /* Error or file closed at other end. */
3476 FDWERR("pike_writev(): writev() failed with errno:%d.\n"
3477 "Sent %ld bytes so far.\n",
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3497 in pike_writev()
3491 break;
3492 }
3493 }
3494 }
3495 }
3496 FDWERR("pike_writev(): Sent %d bytes\n", sent);
>>> CID 1641415: (INTEGER_OVERFLOW)
>>> "sent", which might have underflowed, is returned from the function.
3497 return sent;
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3479 in pike_writev()
3473
3474 if (bytes < 0) {
3475 /* Error or file closed at other end. */
3476 FDWERR("pike_writev(): writev() failed with errno:%d.\n"
3477 "Sent %ld bytes so far.\n",
3478 errno, (long)sent);
>>> CID 1641415: (INTEGER_OVERFLOW)
>>> "sent ? sent : bytes", which might have overflowed, is returned from the function.
3479 return sent ? sent : bytes;
3480 } else {
3481 sent += bytes;
3482
3483 while (bytes) {
3484 if ((size_t)bytes >= (size_t)iov->iov_len) {
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/pike-master?tab=overview