Branch: refs/heads/master
Home: https://github.com/OpenSIPS/opensips
Commit: 9fea57eeaf5c687f49a952692b2b7530ec66a7ee
https://github.com/OpenSIPS/opensips/commit/9fea57eeaf5c687f49a952692b2b7530ec66a7ee
Author: rdondeti <[email protected]>
Date: 2026-04-07 (Tue, 07 Apr 2026)
Changed paths:
M modules/cachedb_memcached/cachedb_memcached.c
Log Message:
-----------
cachedb_memcached: fix NULL deref when memcached_create() returns NULL
memcached_create(NULL) can return NULL on allocation failure. The existing
code never checks the return value, so a NULL memc pointer falls through to
memcached_server_push(NULL, ...) which dereferences the NULL pointer.
Add an explicit NULL check after memcached_create(), following the existing
error-handling pattern in the function (pkg_free + return 0).
Found during a systematic audit of cachedb backends following the
cachedb_redis NULL-deref fix in commit 8fb569cb3.
Commit: 8f959e73c79bf42d06ce2ee7406a80ab9edb8ca1
https://github.com/OpenSIPS/opensips/commit/8f959e73c79bf42d06ce2ee7406a80ab9edb8ca1
Author: rdondeti <[email protected]>
Date: 2026-04-07 (Tue, 07 Apr 2026)
Changed paths:
M modules/cachedb_cassandra/cachedb_cassandra_dbase.c
Log Message:
-----------
cachedb_cassandra: fix NULL deref when cass_cluster_new() returns NULL
cass_cluster_new() can return NULL on allocation failure. The existing code
has a NULL check, but it comes after cass_cluster_set_credentials() already
uses the pointer (when credentials are configured), so a NULL return causes
a crash before the check is reached.
Move the NULL check to immediately after cass_cluster_new(), before any use
of the returned pointer.
Found during a systematic audit of cachedb backends following the
cachedb_redis NULL-deref fix in commit 8fb569cb3.
Compare:
https://github.com/OpenSIPS/opensips/compare/82e242e30f2e...8f959e73c79b
To unsubscribe from these emails, change your notification settings at
https://github.com/OpenSIPS/opensips/settings/notifications
_______________________________________________
Devel mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
