You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Dave Brosius (JIRA)" <ji...@apache.org> on 2016/08/30 14:10:20 UTC
[jira] [Assigned] (CASSANDRA-12566) Null Dereference
[ https://issues.apache.org/jira/browse/CASSANDRA-12566?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dave Brosius reassigned CASSANDRA-12566:
----------------------------------------
Assignee: Dave Brosius
> Null Dereference
> ----------------
>
> Key: CASSANDRA-12566
> URL: https://issues.apache.org/jira/browse/CASSANDRA-12566
> Project: Cassandra
> Issue Type: Sub-task
> Reporter: Eduardo Aguinaga
> Assignee: Dave Brosius
>
> Overview:
> In May through June of 2016 a static analysis was performed on version 3.0.5 of the Cassandra source code. The analysis included an automated analysis using HP Fortify v4.21 SCA and a manual analysis utilizing SciTools Understand v4. The results of that analysis includes the issue below.
> Issue:
> In the file CassandraDaemon.java on line 350 the line of code calls getResource and getClassLoader. Both of these calls can return a null and if so will result in a null dereference in this line of code.
> {code:java}
> CassandraDaemon.java, lines 348-356:
> 348 try
> 349 {
> 350 String reportFileLocation = CassandraDaemon.class.getClassLoader().getResource(metricsReporterConfigFile).getFile();
> 351 ReporterConfig.loadFromFile(reportFileLocation).enableAll(CassandraMetricsRegistry.Metrics);
> 352 }
> 353 catch (Exception e)
> 354 {
> 355 logger.warn("Failed to load metrics-reporter-config, metric sinks will not be activated", e);
> 356 }
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)