New Defects reported by Coverity Scan for Pike-master - Pike-automation

22 Jan 2025


      Hi,
Please find the latest report on new defect(s) introduced to Pike-master found with Coverity Scan.
1 new defect(s) introduced to Pike-master found with Coverity Scan.
1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)
** CID 1641415:    (INTEGER_OVERFLOW)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3472 in pike_writev()
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3497 in pike_writev()
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3479 in pike_writev()
________________________________________________________________________________________________________
*** CID 1641415:    (INTEGER_OVERFLOW)
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3472 in pike_writev()
3466     #endif
3467     
3468     #ifdef MAX_IOVEC
3469         if (cnt > MAX_IOVEC) cnt = MAX_IOVEC;
3470     #endif
3471
...
...
...
CID 1641415:    (INTEGER_OVERFLOW)
"iov->iov_len", which might have underflowed, is passed to "writev(fd, iov, cnt)".

3472         bytes = fd_writev(fd, iov, cnt);
3473     
3474         if (bytes < 0) {
3475           /* Error or file closed at other end. */
3476           FDWERR("pike_writev(): writev() failed with errno:%d.\n"
3477                  "Sent %ld bytes so far.\n",
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3497 in pike_writev()
3491               break;
3492             }
3493           }
3494         }
3495       }
3496       FDWERR("pike_writev(): Sent %d bytes\n", sent);
...
...
...
CID 1641415:    (INTEGER_OVERFLOW)
"sent", which might have underflowed, is returned from the function.

3497       return sent;
/home/covbuilder/pike/Pike-v9.1-snapshot/src/fdlib.c: 3479 in pike_writev()
3473     
3474         if (bytes < 0) {
3475           /* Error or file closed at other end. */
3476           FDWERR("pike_writev(): writev() failed with errno:%d.\n"
3477                  "Sent %ld bytes so far.\n",
3478                  errno, (long)sent);
...
...
...
CID 1641415:    (INTEGER_OVERFLOW)
"sent ? sent : bytes", which might have overflowed, is returned from the function.

3479           return sent ? sent : bytes;
3480         } else {
3481           sent += bytes;
3482     
3483           while (bytes) {
3484             if ((size_t)bytes >= (size_t)iov->iov_len) {
________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/pike-master?tab=overview