Closed Bug 353413 Opened 18 years ago Closed 18 years ago

Klocwork 76541 free uninitialized pointer in CERT_FindCertURLExtension

Categories

(NSS :: Libraries, defect, P2)

3.11
defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: nelson, Assigned: alvolkov.bgs)

Details

(Keywords: klocwork)

Attachments

(1 file)

In file nss/lib/certdb/certv3.c function CERT_FindCertURLExtension, at label "done", baseitem.data and urlitem.data are freed if non-NULL. Neither is initialized if PORT_NewArena returns NULL at line 118. Klocwork items 76541 and 76542
Assignee: nobody → alexei.volkov.bugs
Status: NEW → ASSIGNED
Attachment #240389 - Flags: review?(nelson)
Comment on attachment 240389 [details] [diff] [review] init baseitem and urlitem before allocating arena r=nelson for trunk
Attachment #240389 - Flags: review?(nelson) → review+
/cvsroot/mozilla/security/nss/lib/certdb/certv3.c,v <-- certv3.c new revision: 1.9; previous revision: 1.8
Status: ASSIGNED → RESOLVED
Closed: 18 years ago
Resolution: --- → FIXED
Priority: -- → P2
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: