[jira] [Resolved] (CASSANDRA-12566) Null Dereference

["Dave Brosius (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CASSANDRA-12566?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dave Brosius resolved CASSANDRA-12566.
--------------------------------------
    Resolution: Fixed

> Null Dereference
> ----------------
>
>                 Key: CASSANDRA-12566
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-12566
>             Project: Cassandra
>          Issue Type: Sub-task
>            Reporter: Eduardo Aguinaga
>            Assignee: Dave Brosius
>            Priority: Minor
>             Fix For: 3.10
>
>
> Overview:
> In May through June of 2016 a static analysis was performed on version 3.0.5 of the Cassandra source code. The analysis included an automated analysis using HP Fortify v4.21 SCA and a manual analysis utilizing SciTools Understand v4. The results of that analysis includes the issue below.
> Issue:
> In the file CassandraDaemon.java on line 350 the line of code calls getResource and getClassLoader. Both of these calls can return a null and if so will result in a null dereference in this line of code.
> {code:java}
> CassandraDaemon.java, lines 348-356:
> 348 try
> 349 {
> 350     String reportFileLocation = CassandraDaemon.class.getClassLoader().getResource(metricsReporterConfigFile).getFile();
> 351     ReporterConfig.loadFromFile(reportFileLocation).enableAll(CassandraMetricsRegistry.Metrics);
> 352 }
> 353 catch (Exception e)
> 354 {
> 355     logger.warn("Failed to load metrics-reporter-config, metric sinks will not be activated", e);
> 356 }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)