You are viewing a plain text version of this content. The canonical link for it is here.
Posted to c-dev@axis.apache.org by "Stanislav Osipov (Jira)" <ji...@apache.org> on 2022/03/25 08:50:00 UTC
[jira] [Comment Edited] (AXIS2C-1705) Possible Null pointer dereference
[ https://issues.apache.org/jira/browse/AXIS2C-1705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17512255#comment-17512255 ]
Stanislav Osipov edited comment on AXIS2C-1705 at 3/25/22, 8:49 AM:
--------------------------------------------------------------------
Possible null pointer derefernce
File: /src/core/deployment/dep_engine.c
Null check: line 924
Dereference: line 941
Free: line 928
Use after free: line 938
Code:
if(!(dep_engine->conf_builder)) *//Null check*
{ axis2_conf_set_dep_engine(dep_engine->conf,env,NULL); axis2_conf_free(dep_engine->conf, env); dep_engine->conf = NULL; //Set pointer to Null }
axis2_conf_set_axis2_flag(dep_engine->conf, env, dep_engine->file_flag); *//Null pointer dereference dep_engine->conf*
axis2_conf_set_axis2_xml(dep_engine->conf, env, dep_engine->conf_name);
status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env); *// Null pointer dereference dep_engine->conf_builder*
was (Author: JIRAUSER287103):
Possible derereference after null check
File: /src/core/deployment/dep_engine.c
Null check: line 924
Dereference: line 941
Use after free
File: /src/core/deployment/dep_engine.c
Free: line 928
Use after free: line 938
Code:
if(!(dep_engine->conf_builder)) *//Null check*
{
axis2_conf_set_dep_engine(dep_engine->conf,env,NULL);
axis2_conf_free(dep_engine->conf, env); *//Free*
dep_engine->conf = NULL;
}
axis2_conf_set_axis2_flag(dep_engine->conf, env, dep_engine->file_flag); *//Use-after-free*
axis2_conf_set_axis2_xml(dep_engine->conf, env, dep_engine->conf_name);
status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env); *// Null pointer dereference*
> Possible Null pointer dereference
> ---------------------------------
>
> Key: AXIS2C-1705
> URL: https://issues.apache.org/jira/browse/AXIS2C-1705
> Project: Axis2-C
> Issue Type: Bug
> Components: core/deployment
> Affects Versions: 1.6.0
> Reporter: Stanislav Osipov
> Priority: Minor
>
> File: /src/core/deployment/dep_engine.c
> Null check: line 746
> Dereference: line 755
>
> Code:
> if(!(dep_engine->conf_builder)) *//Null check*
>
> { axis2_conf_free(dep_engine->conf, env); AXIS2_LOG_ERROR(env->log, AXIS2_LOG_SI, "Configuration builder creation failed"); dep_engine->conf = NULL; }
>
> /* Populate the axis2 configuration from reading axis2.xml.
> */
> status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env); *//Null pointer dereference*
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: c-dev-help@axis.apache.org