Open yaobinshi opened 9 years ago
Original Redmine Comment Author Name: Mary Laser Original Date: 2011/12/16 21:20:21 +0000
adding update entry to test email notification
Original Redmine Comment Author Name: Alex Norton Original Date: 2011/12/16 21:25:09 +0000
Committed a fix for this. the fossconfig library now checks the input on all functions for NULL. just needs to be tested
Original Redmine Comment Author Name: Alex Norton Original Date: 2011/12/16 22:11:15 +0000
Has been tested and fixed
Author Name: Bob Gobeille Original Redmine Issue: 105, http://www.fossology.org/issues/105 Original Date: 2011/12/16 Original Assignee: Alex Norton
fo_config_get() uses input conf variable as pointer without checking for null. So calling with bad input (null for conf) causes segv.
This issue was discovered due to http://www.fossology.org/issues/51 which was caused by a segv in fo_config_get().
Inputs should be checked wherever reasonable in all fossconfig.c functions.