<h3>优先级:</h3>次要

<h3>详细描述:</h3>

openEuler-22.03-LTS-SP1版本定期分析ipatch平台抓取的补丁，以下补丁经评审需要合入

<h3>原因分析:</h3>

【是否新引入rpm包，是否进行了安全编译选项扫描】

否

【定位分析】

libnl3本次合入9个补丁：

补丁名称	原因
route-tc-avoid-integer-overflow-in-rtnl_tc_calc_cell_log	修复Coverity扫描的整数溢出问题
xfrm-fix-leaking-usertemplate-in-xfrmnl_sp_parse	修复内存泄漏，sputmpl变量alloc后没有释放内存，现在改成可自动回收的结构体类型，函数结束后可以自动回收，避免内存泄漏
socket-workaround-coverity-warning-about-time_t-handling	处理Coverity静态工具的告警，修复使用时间戳作为seq的问题
lib-fix-signed-overflow-warning-in-nl_object_diff	修改数据类型，防止符号溢出
route-cls-fix-leak-in-error-handling-of-rtnl_flower_append_action	修改函数中逻辑错误
base-don-t-use-static-array-indices-for-buffer-argument-of-_nl_inet_ntop	函数参数固定了buf的长度，但是根据V6和V4协议，地址长度不一致，导致数组溢出的问题；
xfrm-sp-fix-reference-counters-of-sa-selector-tmpl-addresses	增加addr变量的释放点，修复内存泄漏问题
xfrm-clear-XFRM_SP_ATTR_TMPL-when-removing-the-last-template-from-a-policy	清除utmpl_list成员最后一个时，应该修改sp->ce_mask，以免再次进入删除utmpl_list成员的流程，导致其计数错误
xfrm fix crashes in case of ENOMEM	增加nl_addr_build失败后的判断，返回NLE_NOMEM，同时释放前面已经创建的变量

httpd本次合入3个补丁

补丁名称	原因
mod_ssl: release memory to the OS when needed	增加对象初始化失败后的内存释放
core: Fix use after free warning with gcc -fanalyzer	修复cur_extra->pid的use after free
mod_slotmem_shm: Use ap_os_is_path_absolute to make it portable	使用utils.c中的接口ap_os_is_path_absolute判断是否为根路径，该函数还检查slotname是否完整；替换后更为通用

iptables合入6个补丁：

<table><tbody><tr><td>补丁名称</td><td>原因</td></tr><tr><td>nft: Special casing for among match in compare_matches</td><td>避免在比较匹配时产生误判，因为 among match 扩展的数据超出了 'size' 字段的值。因此，需要在 compare_matches函数中忽略XTTYPE_HOSTMASK选项来解决这个问题。需要合入</td></tr></tbody></table>

glibc合入两个补丁

补丁名称	原因
nscd-Skip-unusable-entries-in-first-pass-in-prune_cache-bug-30800	补丁修复了nscd在清理缓存时的一个bug（3080 如果一个条目由于某种原因被标记为不可用，但尚未超时，那么会触发assert。如果在重新验证条目期间检测到数据更改，这会导致条目被标记为不可用。如果nscd在此之后退出，然后时钟向后跳，nscd重启，缓存重新验证在启动后触发已删除的assert。补丁更新记录数据，以便在第二次通过垃圾回收时清理标记为不可用的条目。
nscd-Use-errval-not-errno-to-guide-cache-update-bug-30662	补丁修复了nscd的一个bug，nscd在更新缓存时使用的errno变量可能会被之前的send调用覆盖，导致无法走入条件分支，需合入。

【对外部是否有影响】

否

iproute、iputils、NetworkManager、httpd、libnl3、iptables社区补丁分析回合

<h3>优先级:</h3><p>次要</p><p></p><h3>详细描述:</h3><p></p><p>openEuler-22.03-LTS-SP1版本定期分析ipatch平台抓取的补丁，以下补丁经评审需要合入</p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p> </p><h3>原因分析:</h3><p></p><p>【是否新引入rpm包，是否进行了安全编译选项扫描】</p><p></p><p>否</p><p></p><p>【定位分析】</p><p></p><p>libnl3本次合入9个补丁：</p><p></p><p></p><table ><tr><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">软件包名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">CommitId</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁描述分析</span></td></tr><tr><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td></tr><tr><td colSpan="1" rowSpan="1">lnstat-Fix-deref-of-null-in-print_json-function</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">a193733b7a7ef1e65e1b88045c32f96ed16caeb9</td><td colSpan="1" rowSpan="1">print_json函数里，jsonw_new函数创建json_writer_t对象可能为空，在使用前新增检查它是否为空，避免空指针引用。</td></tr><tr><td colSpan="1" rowSpan="1">mnl_utils-sanitize-incoming-netlink-payload-size-in-callbacks</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">1a68525f4613b4e02e83d4b8004f22ac7ecbfedf</td><td colSpan="1" rowSpan="1">在回调mnlu_cb_stop和mnlu_cb_error不采用内核返回的有效数据长度，因为在mnlu_cb_stop中有出现过长度错误的情况，合入。</td></tr><tr><td colSpan="1" rowSpan="1">iproute2-prevent-memory-leak</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">2c3ebb2ae08a634615e56303d784ddb366e47f04</td><td colSpan="1" rowSpan="1">几个函数在失败get_failed后没有清理已分配的nlmsghdr数据，会导致内存泄漏</td></tr><tr><td colSpan="1" rowSpan="1">libnetlink-validate-nlmsg-header-length-first</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">78eebdbc7d2f96b01a18d7db33c1c99266efc4bc</td><td colSpan="1" rowSpan="1">在获取报文长度之前先校验报头长度，如果校验不通过就直接退；原先代码是先获取报文长度再校验包头长度。合入</td></tr><tr><td colSpan="1" rowSpan="1">tc-remove-tcindex-classifier</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">bc0c1661eb229b77a65f8c5f305fd6fa56e9667f</td><td colSpan="1" rowSpan="1">内核8c710f75256b合入删除了tc中tcindex 分类器算法，欧拉也做了同步修改。所以建议iproute与内核保持同步</td></tr><tr><td colSpan="1" rowSpan="1">ip-fix-memory-leak-in-ip-maddr-show</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">575322b09c3c6bc1806f2faa31edcfb64df302bb</td><td colSpan="1" rowSpan="1">修复ip Maddr show命令中的内存泄漏<br/> 在read_dev_mcast中，会分配ma_info的内存，但在使用后不会清除</td></tr><tr><td colSpan="1" rowSpan="1">ila-fix-potential-snprintf-buffer-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">e8a3fca81cd4b8fee14cfb14a5ce9c1b3b63e797</td><td colSpan="1" rowSpan="1">修复snprintf 可能的数组溢出问题</td></tr><tr><td colSpan="1" rowSpan="1">bridge-fix-potential-snprintf-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">4d80122ae82aea86cb740b5202f6c3fde6183538</td><td colSpan="1" rowSpan="1">修复snprintf函数存在的元素溢出的风险</td></tr></table><p></p><p></p><p>【对外部是否有影响】</p><p></p><p>否</p><p></p><p></p>

<h3>优先级:</h3><p>次要</p><p></p><h3>详细描述:</h3><p></p><p>openEuler-22.03-LTS-SP1版本定期分析ipatch平台抓取的补丁，以下补丁经评审需要合入</p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p> </p><h3>原因分析:</h3><p></p><p>【是否新引入rpm包，是否进行了安全编译选项扫描】</p><p></p><p>否</p><p></p><p>【定位分析】</p><p></p><p>iproute本次合入9个补丁：</p><p></p><p></p><table ><tr><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">软件包名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">CommitId</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁描述分析</span></td></tr><tr><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td></tr><tr><td colSpan="1" rowSpan="1">lnstat-Fix-deref-of-null-in-print_json-function</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">a193733b7a7ef1e65e1b88045c32f96ed16caeb9</td><td colSpan="1" rowSpan="1">print_json函数里，jsonw_new函数创建json_writer_t对象可能为空，在使用前新增检查它是否为空，避免空指针引用。</td></tr><tr><td colSpan="1" rowSpan="1">mnl_utils-sanitize-incoming-netlink-payload-size-in-callbacks</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">1a68525f4613b4e02e83d4b8004f22ac7ecbfedf</td><td colSpan="1" rowSpan="1">在回调mnlu_cb_stop和mnlu_cb_error不采用内核返回的有效数据长度，因为在mnlu_cb_stop中有出现过长度错误的情况，合入。</td></tr><tr><td colSpan="1" rowSpan="1">iproute2-prevent-memory-leak</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">2c3ebb2ae08a634615e56303d784ddb366e47f04</td><td colSpan="1" rowSpan="1">几个函数在失败get_failed后没有清理已分配的nlmsghdr数据，会导致内存泄漏</td></tr><tr><td colSpan="1" rowSpan="1">libnetlink-validate-nlmsg-header-length-first</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">78eebdbc7d2f96b01a18d7db33c1c99266efc4bc</td><td colSpan="1" rowSpan="1">在获取报文长度之前先校验报头长度，如果校验不通过就直接退；原先代码是先获取报文长度再校验包头长度。合入</td></tr><tr><td colSpan="1" rowSpan="1">tc-remove-tcindex-classifier</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">bc0c1661eb229b77a65f8c5f305fd6fa56e9667f</td><td colSpan="1" rowSpan="1">内核8c710f75256b合入删除了tc中tcindex 分类器算法，欧拉也做了同步修改。所以建议iproute与内核保持同步</td></tr><tr><td colSpan="1" rowSpan="1">ip-fix-memory-leak-in-ip-maddr-show</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">575322b09c3c6bc1806f2faa31edcfb64df302bb</td><td colSpan="1" rowSpan="1">修复ip Maddr show命令中的内存泄漏<br/> 在read_dev_mcast中，会分配ma_info的内存，但在使用后不会清除</td></tr><tr><td colSpan="1" rowSpan="1">ila-fix-potential-snprintf-buffer-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">e8a3fca81cd4b8fee14cfb14a5ce9c1b3b63e797</td><td colSpan="1" rowSpan="1">修复snprintf 可能的数组溢出问题</td></tr><tr><td colSpan="1" rowSpan="1">bridge-fix-potential-snprintf-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">4d80122ae82aea86cb740b5202f6c3fde6183538</td><td colSpan="1" rowSpan="1">修复snprintf函数存在的元素溢出的风险</td></tr></table><p></p><p></p><p>【对外部是否有影响】</p><p></p><p>否</p><p></p><p></p>

<h3>优先级:</h3><p>次要</p><p></p><h3>详细描述:</h3><p></p><p>openEuler-22.03-LTS-SP1版本定期分析ipatch平台抓取的补丁，以下补丁经评审需要合入</p><p></p><p> </p><h3>原因分析:</h3><p></p><p>【是否新引入rpm包，是否进行了安全编译选项扫描】</p><p></p><p>否</p><p></p><p>【定位分析】</p><p></p><p>iproute本次合入8个补丁：</p><p></p><p></p><table ><tr><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">软件包名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">CommitId</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁描述分析</span></td></tr><tr><td colSpan="1" rowSpan="2">lnstat-Fix-deref-of-null-in-print_json-function</td><td colSpan="1" rowSpan="2">openEuler:iproute</td><td colSpan="1" rowSpan="2">a193733b7a7ef1e65e1b88045c32f96ed16caeb9</td><td colSpan="1" rowSpan="2">print_json函数里，jsonw_new函数创建json_writer_t对象可能为空，在使用前新增检查它是否为空，避免空指针引用。</td></tr><tr><td colSpan="1" rowSpan="1">mnl_utils-sanitize-incoming-netlink-payload-size-in-callbacks</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">1a68525f4613b4e02e83d4b8004f22ac7ecbfedf</td><td colSpan="1" rowSpan="1">在回调mnlu_cb_stop和mnlu_cb_error不采用内核返回的有效数据长度，因为在mnlu_cb_stop中有出现过长度错误的情况，合入。</td></tr><tr><td colSpan="1" rowSpan="1">iproute2-prevent-memory-leak</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">2c3ebb2ae08a634615e56303d784ddb366e47f04</td><td colSpan="1" rowSpan="1">几个函数在失败get_failed后没有清理已分配的nlmsghdr数据，会导致内存泄漏</td></tr><tr><td colSpan="1" rowSpan="1">libnetlink-validate-nlmsg-header-length-first</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">78eebdbc7d2f96b01a18d7db33c1c99266efc4bc</td><td colSpan="1" rowSpan="1">在获取报文长度之前先校验报头长度，如果校验不通过就直接退；原先代码是先获取报文长度再校验包头长度。合入</td></tr><tr><td colSpan="1" rowSpan="1">tc-remove-tcindex-classifier</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">bc0c1661eb229b77a65f8c5f305fd6fa56e9667f</td><td colSpan="1" rowSpan="1">内核8c710f75256b合入删除了tc中tcindex 分类器算法，欧拉也做了同步修改。所以建议iproute与内核保持同步</td></tr><tr><td colSpan="1" rowSpan="1">ip-fix-memory-leak-in-ip-maddr-show</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">575322b09c3c6bc1806f2faa31edcfb64df302bb</td><td colSpan="1" rowSpan="1">修复ip Maddr show命令中的内存泄漏<br/> 在read_dev_mcast中，会分配ma_info的内存，但在使用后不会清除</td></tr><tr><td colSpan="1" rowSpan="1">ila-fix-potential-snprintf-buffer-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">e8a3fca81cd4b8fee14cfb14a5ce9c1b3b63e797</td><td colSpan="1" rowSpan="1">修复snprintf 可能的数组溢出问题</td></tr><tr><td colSpan="1" rowSpan="1">bridge-fix-potential-snprintf-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">4d80122ae82aea86cb740b5202f6c3fde6183538</td><td colSpan="1" rowSpan="1">修复snprintf函数存在的元素溢出的风险</td></tr></table><p></p><p></p><p>【对外部是否有影响】</p><p></p><p>否</p><p></p><p></p>

<h3>优先级:</h3><p>次要</p><p></p><h3>详细描述:</h3><p></p><p>openEuler-22.03-LTS-SP1版本定期分析ipatch平台抓取的补丁，以下补丁经评审需要合入</p><p></p><p> </p><h3>原因分析:</h3><p></p><p>【是否新引入rpm包，是否进行了安全编译选项扫描】</p><p></p><p>否</p><p></p><p>【定位分析】</p><p></p><p>iproute本次合入8个补丁：</p><p></p><p></p><table ><tr><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">软件包名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">CommitId</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁描述分析</span></td></tr><tr><td colSpan="1" rowSpan="2">lnstat-Fix-deref-of-null-in-print_json-function</td><td colSpan="1" rowSpan="2">openEuler:iproute</td><td colSpan="1" rowSpan="2">a193733b7a7ef1e65e1b88045c32f96ed16caeb9</td><td colSpan="1" rowSpan="2">print_json函数里，jsonw_new函数创建json_writer_t对象可能为空，在使用前新增检查它是否为空，避免空指针引用。</td></tr><tr><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td><td colSpan="1" rowSpan="1"></td></tr><tr><td colSpan="1" rowSpan="1">iproute2-prevent-memory-leak</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">2c3ebb2ae08a634615e56303d784ddb366e47f04</td><td colSpan="1" rowSpan="1">几个函数在失败get_failed后没有清理已分配的nlmsghdr数据，会导致内存泄漏</td></tr><tr><td colSpan="1" rowSpan="1">libnetlink-validate-nlmsg-header-length-first</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">78eebdbc7d2f96b01a18d7db33c1c99266efc4bc</td><td colSpan="1" rowSpan="1">在获取报文长度之前先校验报头长度，如果校验不通过就直接退；原先代码是先获取报文长度再校验包头长度。合入</td></tr><tr><td colSpan="1" rowSpan="1">tc-remove-tcindex-classifier</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">bc0c1661eb229b77a65f8c5f305fd6fa56e9667f</td><td colSpan="1" rowSpan="1">内核8c710f75256b合入删除了tc中tcindex 分类器算法，欧拉也做了同步修改。所以建议iproute与内核保持同步</td></tr><tr><td colSpan="1" rowSpan="1">ip-fix-memory-leak-in-ip-maddr-show</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">575322b09c3c6bc1806f2faa31edcfb64df302bb</td><td colSpan="1" rowSpan="1">修复ip Maddr show命令中的内存泄漏<br/> 在read_dev_mcast中，会分配ma_info的内存，但在使用后不会清除</td></tr><tr><td colSpan="1" rowSpan="1">ila-fix-potential-snprintf-buffer-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">e8a3fca81cd4b8fee14cfb14a5ce9c1b3b63e797</td><td colSpan="1" rowSpan="1">修复snprintf 可能的数组溢出问题</td></tr><tr><td colSpan="1" rowSpan="1">bridge-fix-potential-snprintf-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">4d80122ae82aea86cb740b5202f6c3fde6183538</td><td colSpan="1" rowSpan="1">修复snprintf函数存在的元素溢出的风险</td></tr></table><p></p><p></p><p>【对外部是否有影响】</p><p></p><p>否</p><p></p><p></p>

<h3>优先级:</h3><p>次要</p><p></p><h3>详细描述:</h3><p></p><p>openEuler-22.03-LTS-SP1版本定期分析ipatch平台抓取的补丁，以下补丁经评审需要合入</p><p></p><p> </p><h3>原因分析:</h3><p></p><p>【是否新引入rpm包，是否进行了安全编译选项扫描】</p><p></p><p>否</p><p></p><p>【定位分析】</p><p></p><p>iproute本次合入8个补丁：</p><p></p><table ><tr><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">软件包名</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">CommitId</span></td><td colSpan="1" rowSpan="1"><span style="background-color:#99ccff">补丁描述分析</span></td></tr><tr><td colSpan="1" rowSpan="2">lnstat-Fix-deref-of-null-in-print_json-function</td><td colSpan="1" rowSpan="2">openEuler:iproute</td><td colSpan="1" rowSpan="2">a193733b7a7ef1e65e1b88045c32f96ed16caeb9</td><td colSpan="1" rowSpan="2">print_json函数里，jsonw_new函数创建json_writer_t对象可能为空，在使用前新增检查它是否为空，避免空指针引用。</td></tr><tr><td colSpan="1" rowSpan="1"><br/></td><td colSpan="1" rowSpan="1"><br/></td><td colSpan="1" rowSpan="1"><br/></td><td colSpan="1" rowSpan="1"><br/></td></tr><tr><td colSpan="1" rowSpan="1">iproute2-prevent-memory-leak</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">2c3ebb2ae08a634615e56303d784ddb366e47f04</td><td colSpan="1" rowSpan="1">几个函数在失败get_failed后没有清理已分配的nlmsghdr数据，会导致内存泄漏</td></tr><tr><td colSpan="1" rowSpan="1">libnetlink-validate-nlmsg-header-length-first</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">78eebdbc7d2f96b01a18d7db33c1c99266efc4bc</td><td colSpan="1" rowSpan="1">在获取报文长度之前先校验报头长度，如果校验不通过就直接退；原先代码是先获取报文长度再校验包头长度。合入</td></tr><tr><td colSpan="1" rowSpan="1">tc-remove-tcindex-classifier</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">bc0c1661eb229b77a65f8c5f305fd6fa56e9667f</td><td colSpan="1" rowSpan="1">内核8c710f75256b合入删除了tc中tcindex 分类器算法，欧拉也做了同步修改。所以建议iproute与内核保持同步</td></tr><tr><td colSpan="1" rowSpan="1">ip-fix-memory-leak-in-ip-maddr-show</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">575322b09c3c6bc1806f2faa31edcfb64df302bb</td><td colSpan="1" rowSpan="1">修复ip Maddr show命令中的内存泄漏  在read_dev_mcast中，会分配ma_info的内存，但在使用后不会清除</td></tr><tr><td colSpan="1" rowSpan="1">ila-fix-potential-snprintf-buffer-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">e8a3fca81cd4b8fee14cfb14a5ce9c1b3b63e797</td><td colSpan="1" rowSpan="1">修复snprintf 可能的数组溢出问题</td></tr><tr><td colSpan="1" rowSpan="1">bridge-fix-potential-snprintf-overflow</td><td colSpan="1" rowSpan="1">openEuler:iproute</td><td colSpan="1" rowSpan="1">4d80122ae82aea86cb740b5202f6c3fde6183538</td><td colSpan="1" rowSpan="1">修复snprintf函数存在的元素溢出的风险</td></tr></table><p></p><p></p><p>【对外部是否有影响】</p><p></p><p>否</p><p></p><p></p>

<h3>优先级:</h3><p>次要</p><p></p><h3>详细描述:</h3><p></p><p>openEuler-22.03-LTS-SP1版本定期分析ipatch平台抓取的补丁，以下补丁经评审需要合入</p><p></p><p> </p><h3>原因分析:</h3><p></p><p>【是否新引入rpm包，是否进行了安全编译选项扫描】</p><p></p><p>否</p><p></p><p>【定位分析】</p><p></p><p>iproute本次合入8个补丁：</p><p></p><table ><tr><td colSpan="1" rowSpan="1"> 补丁名</td><td colSpan="1" rowSpan="1"> 软件包名</td><td colSpan="1" rowSpan="1"> CommitId</td><td colSpan="1" rowSpan="1"> 补丁描述分析</td></tr><tr><td colSpan="1" rowSpan="2"> lnstat-Fix-deref-of-null-in-print_json-function</td><td colSpan="1" rowSpan="2"> openEuler:iproute</td><td colSpan="1" rowSpan="2"> a193733b7a7ef1e65e1b88045c32f96ed16caeb9</td><td colSpan="1" rowSpan="2"> print_json函数里，jsonw_new函数创建json_writer_t对象可能为空，在使用前新增检查它是否为空，避免空指针引用。</td></tr><tr><td colSpan="1" rowSpan="1"> iproute2-prevent-memory-leak</td><td colSpan="1" rowSpan="1"> openEuler:iproute</td><td colSpan="1" rowSpan="1"> 2c3ebb2ae08a634615e56303d784ddb366e47f04</td><td colSpan="1" rowSpan="1"> 几个函数在失败get_failed后没有清理已分配的nlmsghdr数据，会导致内存泄漏</td></tr><tr><td colSpan="1" rowSpan="1"> libnetlink-validate-nlmsg-header-length-first</td><td colSpan="1" rowSpan="1"> openEuler:iproute</td><td colSpan="1" rowSpan="1"> 78eebdbc7d2f96b01a18d7db33c1c99266efc4bc</td><td colSpan="1" rowSpan="1"> 在获取报文长度之前先校验报头长度，如果校验不通过就直接退；原先代码是先获取报文长度再校验包头长度。合入</td></tr><tr><td colSpan="1" rowSpan="1"> tc-remove-tcindex-classifier</td><td colSpan="1" rowSpan="1"> openEuler:iproute</td><td colSpan="1" rowSpan="1"> bc0c1661eb229b77a65f8c5f305fd6fa56e9667f</td><td colSpan="1" rowSpan="1"> 内核8c710f75256b合入删除了tc中tcindex 分类器算法，欧拉也做了同步修改。所以建议iproute与内核保持同步</td></tr><tr><td colSpan="1" rowSpan="1"> ip-fix-memory-leak-in-ip-maddr-show</td><td colSpan="1" rowSpan="1"> openEuler:iproute</td><td colSpan="1" rowSpan="1"> 575322b09c3c6bc1806f2faa31edcfb64df302bb</td><td colSpan="1" rowSpan="1"> 修复ip Maddr show命令中的内存泄漏 在read_dev_mcast中，会分配ma_info的内存，但在使用后不会清除</td></tr><tr><td colSpan="1" rowSpan="1"> ila-fix-potential-snprintf-buffer-overflow</td><td colSpan="1" rowSpan="1"> openEuler:iproute</td><td colSpan="1" rowSpan="1"> e8a3fca81cd4b8fee14cfb14a5ce9c1b3b63e797</td><td colSpan="1" rowSpan="1"> 修复snprintf 可能的数组溢出问题</td></tr><tr><td colSpan="1" rowSpan="1"> bridge-fix-potential-snprintf-overflow</td><td colSpan="1" rowSpan="1"> openEuler:iproute</td><td colSpan="1" rowSpan="1"> 4d80122ae82aea86cb740b5202f6c3fde6183538</td><td colSpan="1" rowSpan="1"> 修复snprintf函数存在的元素溢出的风险</td></tr></table><p></p><p></p><p>【对外部是否有影响】</p><p></p><p>否</p><p></p><p></p>