Skip to content

[Coverity CID: 516221] Out-of-bounds access in subsys/net/lib/sockets/sockets_packet.c #90554

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
zephyrbot opened this issue May 25, 2025 · 1 comment
Assignees
Labels
area: Networking area: Sockets Networking sockets bug The issue is a bug, or the PR is fixing a bug Coverity A Coverity detected issue or its fix priority: high High impact/importance bug

Comments

@zephyrbot
Copy link
Collaborator

Static code scan issues found in file:

https://github.com/zephyrproject-rtos/zephyr/tree/265cfb45a818f39cf03c3527b5d1b21027d3cac1/subsys/net/lib/sockets/sockets_packet.c

Category: Memory - corruptions
Function: zpacket_set_source_addr
Component: Networking
CID: 516221

Details:

memcpy(addr.sll_addr, pkt->lladdr_src.addr,

Please fix or provide comments in coverity using the link:

https://scan9.scan.coverity.com/#/project-view/29271/12996?selectedIssue=516221

For more information about the violation, check the Coverity Reference. (CWE-119)

Note: This issue was created automatically. Priority was set based on classification
of the file affected and the impact field in coverity. Assignees were set using the MAINTAINERS file.

@zephyrbot zephyrbot added bug The issue is a bug, or the PR is fixing a bug priority: high High impact/importance bug area: Networking Coverity A Coverity detected issue or its fix area: Sockets Networking sockets labels May 25, 2025
@jukkar
Copy link
Member

jukkar commented May 26, 2025

False positive

@jukkar jukkar closed this as completed May 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: Networking area: Sockets Networking sockets bug The issue is a bug, or the PR is fixing a bug Coverity A Coverity detected issue or its fix priority: high High impact/importance bug
Projects
None yet
Development

No branches or pull requests

3 participants