#507 Incorrect error handling in sdap_initgr_nested_send() could lead to NULL pointer dereference
Closed: Fixed None Opened 13 years ago by sgallagh.

From Coverity:

At conditional (1): "!el" taking the true branch.
Comparing "el" to null implies that "el" might be null.
 1658    if (ret || !el || el->num_values == 0) {
At conditional (2): "4 <= debug_level" taking the true branch.
At conditional (3): "debug_timestamps" taking the true branch.
 1659        DEBUG(4, ("User entry lacks original memberof ?\n"));
 1660        /* user with no groups ? */
 1661        tevent_req_error(req, ENOENT);
 1662        tevent_req_post(req, ev);
 1663    }
Dereferencing null variable "el".
 1664    state->count = el->num_values;

There should be a return statement after the tevent_req_post() here.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.2.1
owner: somebody => sgallagh
status: new => assigned

Fields changed

keywords: => coverity

Fixed by a05ee9b

fixedin: => 1.2.1
resolution: => fixed
status: assigned => closed

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.2.1

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1549

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata