[jira] [Updated] (TS-4845) NULL dereference in url_sig

["Phil Sorber (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/TS-4845?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Phil Sorber updated TS-4845:
----------------------------
    Backport to Version:   (was: 6.2.1)

> NULL dereference in url_sig
> ---------------------------
>
>                 Key: TS-4845
>                 URL: https://issues.apache.org/jira/browse/TS-4845
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Plugins
>            Reporter: James Peach
>            Assignee: John Rushford
>             Fix For: 6.2.1, 7.0.0
>
>          Time Spent: 2h 20m
>  Remaining Estimate: 0h
>
> Seen in the static analyzer:
> {noformat}
> Making all in url_sig
>   CC       url_sig.lo
> url_sig.c:564:38: warning: Null pointer argument in call to string length function
>   app_qry = getAppQueryString(query, strlen(query));
>                                      ^~~~~~~~~~~~~
> 1 warning generated.
> {noformat}
> If there is no query string you can still do {{goto allow}}, but it looks like the code assumes missing query string will always {{goto deny}}.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)