Skip to content

[BUG] Null pointer dereference vulnerability in utils.c #2651

@shiyujunz

Description

@shiyujunz

I have found a potential null pointer dereference bug in utils.c and would like to report it to the maintainers. This vulnerability has the potential to cause unexpected application behavior, crashes. Can you please help me check it? Thank you for your effort and patience!

Below is the execution sequence of the program that may produce null pointer dereference bug .
First, the function copy_string in the file utils.c returns null.
Second, the function copy_string is called at line 178 in the function basecfg, which causes c to be assigned to null.
Finally, at line 179, c is passed as an argument to the function strchr, where it is dereferenced, which leads to a null pointer dereference vulnerability.

Image

Thank you very much for reading and I look forward to hearing from you!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions