[Sblim-issues] [ sblim-Bugs-3162016 ] sfcbd Segmentation fault in cleanupCimXmlRequest

[SourceForge.net <no...@so...>]

Bugs item #3162016, was opened at 2011-01-19 15:49
Message generated for change (Tracker Item Submitted) made by tjwarne
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=712784&aid=3162016&group_id=128809

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: sfcb
Group: Stability
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Tom Warne (tjwarne)
Assigned to: Chris Buccella (buccella)
Summary: sfcbd Segmentation fault in cleanupCimXmlRequest

Initial Comment:
In sfcb 1.3.10, the cleanupCimXmlRequest function in cimXmlRequest.c needs to check for null pointers.

Here is a backtrace, showing an empty response being passed into cleanupCimXmlRequest:

#0  0x0ff867b4 in cleanupCimXmlRequest (rs=0x7fb051e8) at cimXmlRequest.c:2684
2684       free(xmb->base);
(gdb) bt
**NOTE: debug frames are hidden in bt display**
#0  0x0ff867b4 in cleanupCimXmlRequest (rs=0x7fb051e8) at cimXmlRequest.c:2684
#1  0x0ffb57a4 in doHttpRequest (conn_fd={socket = 70, file = 0x1002cf80, buf = 0x1002d668, bio = 0x1004a5a8, ssl = 0x1002b328})
    at httpAdapter.c:1009
#2  0x0ffb6224 in handleHttpRequest (connFd=70, sslMode=1) at httpAdapter.c:1175
#3  0x0ffb684c in acceptRequest (sock=69, ssin=0x7fb05678, sin_len=28, sslMode=1) at httpAdapter.c:1356
#4  0x0ffb77b4 in httpDaemon (argc=2, argv=0x7fb05a24, sslMode=1, sfcbPid=265830408) at httpAdapter.c:1709
#5  0x10003138 in startHttpd (argc=2, argv=0x7fb05a24, sslMode=1) at sfcBroker.c:398
#6  0x10003e14 in main (argc=2, argv=0x7fb05a24) at sfcBroker.c:741
#7  0x0fc00cf0 in generic_start_main (main=0x100032d0 <main>, argc=2, ubp_av=0x7fb05a24, auxvec=0x7fb05abc,
    init=<value optimized out>, fini=<value optimized out>, rtld_fini=<value optimized out>, stack_end=<value optimized out>)
    at ../csu/libc-start.c:231
#8  0x0fc00f0c in __libc_start_main (argc=2, ubp_av=0x7fb05a24, ubp_ev=<value optimized out>, auxvec=0x7fb05abc,
    rtld_fini=0x3000e0a8 <_dl_fini>, stinfo=0x100041e8, stack_on_entry=0x7fb05a10)
    at ../sysdeps/unix/sysv/linux/powerpc/libc-start.c:127
(gdb) info args
rs = (RespSegments *) 0x7fb051e8
(gdb) frame 1
#1  0x0ffb57a4 in doHttpRequest (conn_fd={socket = 70, file = 0x1002cf80, buf = 0x1002d668, bio = 0x1004a5a8, ssl = 0x1002b328})
    at httpAdapter.c:1009
1009       cleanupCimXmlRequest(&response);
(gdb) print response
$3 = {buffer = 0x0, chunkedMode = 0, rc = 0, errMsg = 0x0, segments = {{mode = 0, txt = 0x0}, {mode = 0, txt = 0x0}, {mode = 0,
      txt = 0x0}, {mode = 0, txt = 0x0}, {mode = 0, txt = 0x0}, {mode = 0, txt = 0x0}, {mode = 0, txt = 0x0}}}



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=712784&aid=3162016&group_id=128809