[ https://issues.apache.org/jira/browse/CASSANDRA-12566?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dave Brosius resolved CASSANDRA-12566. -------------------------------------- Resolution: Fixed > Null Dereference > ---------------- > > Key: CASSANDRA-12566 > URL: https://issues.apache.org/jira/browse/CASSANDRA-12566 > Project: Cassandra > Issue Type: Sub-task > Reporter: Eduardo Aguinaga > Assignee: Dave Brosius > Priority: Minor > Fix For: 3.10 > > > Overview: > In May through June of 2016 a static analysis was performed on version 3.0.5 > of the Cassandra source code. The analysis included an automated analysis > using HP Fortify v4.21 SCA and a manual analysis utilizing SciTools > Understand v4. The results of that analysis includes the issue below. > Issue: > In the file CassandraDaemon.java on line 350 the line of code calls > getResource and getClassLoader. Both of these calls can return a null and if > so will result in a null dereference in this line of code. > {code:java} > CassandraDaemon.java, lines 348-356: > 348 try > 349 { > 350 String reportFileLocation = > CassandraDaemon.class.getClassLoader().getResource(metricsReporterConfigFile).getFile(); > 351 > ReporterConfig.loadFromFile(reportFileLocation).enableAll(CassandraMetricsRegistry.Metrics); > 352 } > 353 catch (Exception e) > 354 { > 355 logger.warn("Failed to load metrics-reporter-config, metric sinks > will not be activated", e); > 356 } > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)