[ https://issues.apache.org/jira/browse/AXIS2C-1705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17512255#comment-17512255 ]
Stanislav Osipov edited comment on AXIS2C-1705 at 3/25/22, 8:49 AM: -------------------------------------------------------------------- Possible null pointer derefernce File: /src/core/deployment/dep_engine.c Null check: line 924 Dereference: line 941 Free: line 928 Use after free: line 938 Code: if(!(dep_engine->conf_builder)) *//Null check* { axis2_conf_set_dep_engine(dep_engine->conf,env,NULL); axis2_conf_free(dep_engine->conf, env); dep_engine->conf = NULL; //Set pointer to Null } axis2_conf_set_axis2_flag(dep_engine->conf, env, dep_engine->file_flag); *//Null pointer dereference dep_engine->conf* axis2_conf_set_axis2_xml(dep_engine->conf, env, dep_engine->conf_name); status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env); *// Null pointer dereference dep_engine->conf_builder* was (Author: JIRAUSER287103): Possible derereference after null check File: /src/core/deployment/dep_engine.c Null check: line 924 Dereference: line 941 Use after free File: /src/core/deployment/dep_engine.c Free: line 928 Use after free: line 938 Code: if(!(dep_engine->conf_builder)) *//Null check* { axis2_conf_set_dep_engine(dep_engine->conf,env,NULL); axis2_conf_free(dep_engine->conf, env); *//Free* dep_engine->conf = NULL; } axis2_conf_set_axis2_flag(dep_engine->conf, env, dep_engine->file_flag); *//Use-after-free* axis2_conf_set_axis2_xml(dep_engine->conf, env, dep_engine->conf_name); status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env); *// Null pointer dereference* > Possible Null pointer dereference > --------------------------------- > > Key: AXIS2C-1705 > URL: https://issues.apache.org/jira/browse/AXIS2C-1705 > Project: Axis2-C > Issue Type: Bug > Components: core/deployment > Affects Versions: 1.6.0 > Reporter: Stanislav Osipov > Priority: Minor > > File: /src/core/deployment/dep_engine.c > Null check: line 746 > Dereference: line 755 > > Code: > if(!(dep_engine->conf_builder)) *//Null check* > > { axis2_conf_free(dep_engine->conf, env); > AXIS2_LOG_ERROR(env->log, AXIS2_LOG_SI, "Configuration builder creation > failed"); dep_engine->conf = NULL; } > > /* Populate the axis2 configuration from reading axis2.xml. > */ > status = axis2_conf_builder_populate_conf(dep_engine->conf_builder, env); > *//Null pointer dereference* -- This message was sent by Atlassian Jira (v8.20.1#820001) --------------------------------------------------------------------- To unsubscribe, e-mail: c-dev-unsubscr...@axis.apache.org For additional commands, e-mail: c-dev-h...@axis.apache.org