]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Fix a possible null pointer dereference in ap_expr_parse()
authorGiovanni Bechis <gbechis@apache.org>
Tue, 28 Mar 2023 21:12:47 +0000 (21:12 +0000)
committerGiovanni Bechis <gbechis@apache.org>
Tue, 28 Mar 2023 21:12:47 +0000 (21:12 +0000)
commit4599b709bb9ff6895d7627e24940701ea192987a
tree4ec0b9b01cd68d4c59df4513b7b72cbb82a901da
parent5a99ae2a7133181fbf4e7009c288380840a1b5b8
Fix a possible null pointer dereference in ap_expr_parse()

In ap_expr_parse(), ap_expr_yylex_init() will return 1 on failure,
and ctx.scanner will remain NULL. However the return value of
ap_expr_yylex_init() is not checked, and there is a dereference of
ctx.scanner in following function ap_expr_yyset_extra(),
which may lead to NULL pointer dereference.

Fix this bug by adding return value check of ap_expr_yylex_init.

Submitted by: Zhou Qingyang <zhou1615@umn.edu>

Github: closes #308

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1908772 13f79535-47bb-0310-9956-ffa450edef68
server/util_expr_eval.c