CID: 14
Checker: FORWARD_NULL (help)
File: services/msg.c
Function: message_handler_req_exec_msg_queuegroupremove
Description: Variable "group" tracked as NULL was dereferenced.

If the group is not found then there can be a segfault in the error code.

===================================================================
--- services/msg.c      (revision 1671)
+++ services/msg.c      (working copy)
@@ -1976,8 +1976,9 @@
                 * Track changes (callback) if tracking is enabled
                 */

-               if ((group->track_flags & SA_TRACK_CHANGES) ||
-                   (group->track_flags & SA_TRACK_CHANGES_ONLY))
+               if (group != NULL &&
+                   ((group->track_flags & SA_TRACK_CHANGES) ||
+                   (group->track_flags & SA_TRACK_CHANGES_ONLY)))
                {
                        res_lib_msg_queuegrouptrack.header.size =
                                (sizeof (struct res_lib_msg_queuegrouptrack) +
_______________________________________________
Openais mailing list
[email protected]
https://lists.linux-foundation.org/mailman/listinfo/openais

Reply via email to