From 3cbb53e0693b450dcda7d5e5e82bde3d31ef4bba Mon Sep 17 00:00:00 2001
From: Dong Anyuan <donganyuan@cn.fujitsu.com>
Date: Tue, 28 May 2019 21:40:35 +0900
Subject: [PATCH] Fix Coverity Scan CID 300429 (Overrunning array buffer of 255
bytes by passing it to a function which accesses it at byte offset 65534
using argument size (which evaluates to 65535).)
---
openair2/RRC/LTE/rrc_eNB.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/openair2/RRC/LTE/rrc_eNB.c b/openair2/RRC/LTE/rrc_eNB.c
index 82bd72d2d7..a6865bdedd 100644
--- a/openair2/RRC/LTE/rrc_eNB.c
+++ b/openair2/RRC/LTE/rrc_eNB.c
@@ -8166,7 +8166,7 @@ rrc_eNB_generate_RRCConnectionReconfiguration_Sidelink(
//-----------------------------------------------------------------------------
{
uint8_t buffer[RRC_BUF_SIZE];
- uint16_t size = -1;
+ uint16_t size = 0;
memset(buffer, 0, RRC_BUF_SIZE);
// allocate dedicated pools for UE -sl-CommConfig/sl-DiscConfig (sl-V2X-ConfigDedicated)
--
GitLab