[
https://issues.apache.org/jira/browse/AXIS2C-1705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17512255#comment-17512255
]
Stanislav Osipov commented on AXIS2C-1705:
------------------------------------------
Possible derereference after null check
File: /src/core/deployment/dep_engine.c
Null check: line 924
Dereference: line 941
Code:
if(!(dep_engine->conf_builder)) *//Null check*
{
/* Set the dep_engine to NULL before freeing conf in order to
avoid deleting it twice*/
axis2_conf_set_dep_engine(dep_engine->conf,env,NULL);
axis2_conf_free(dep_engine->conf, env);
dep_engine->conf = NULL;
}
/**
Very important: Only after populating we will be able to access
parameters in axis2 xml.
*/
axis2_conf_set_axis2_flag(dep_engine->conf, env, dep_engine->file_flag);
axis2_conf_set_axis2_xml(dep_engine->conf, env, dep_engine->conf_name);
status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env);
*// Null pointer dereference*
> Possible dereference after null
> -------------------------------
>
> Key: AXIS2C-1705
> URL: https://issues.apache.org/jira/browse/AXIS2C-1705
> Project: Axis2-C
> Issue Type: Bug
> Components: core/deployment
> Affects Versions: 1.6.0
> Reporter: Stanislav Osipov
> Priority: Minor
>
> File: /src/core/deployment/dep_engine.c
> Null check: line 746
> Dereference: line 755
>
> Code:
> if(!(dep_engine->conf_builder)) *//Null check*
> {
> axis2_conf_free(dep_engine->conf, env);
> AXIS2_LOG_ERROR(env->log, AXIS2_LOG_SI, "Configuration builder
> creation failed");
> dep_engine->conf = NULL;
> }
>
> /* Populate the axis2 configuration from reading axis2.xml.
> */
> status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env);
> *//Dereference*
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: c-dev-h...@axis.apache.org
