Uploaded image for project: 'HPCC'
  1. HPCC
  2. HPCC-16808

loadPluggableSecManager needs to handle nullptr ISecManager return values

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 6.2.x
    • Fix Version/s: 6.4.0
    • Component/s: Security Manager
    • Labels:
      None

      Description

      If a security manager plugin fails to instantiate an ISecManager instance and returns nullptr, the nullptr is returned by loadPluggableSecManager to EspHttpBinding::EspHttpBinding. The binding assumes that the presence of a security manager configuration implies a non-NULL return and immediately dereferences the pointer - resulting in a segmentation fault.

      loadPluggableSecManager already throws exceptions, instead of returning NULL, if it cannot call the plugin. It needs to throw an exception if the plugin returns NULL.

        Attachments

          Activity

            People

            • Assignee:
              russwhitehead Russ Whitehead
              Reporter:
              klemti01 Tim Klemm
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: