Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fix potential nullptr deref in Spicy plugin runtime

Browse source 
If we added a file but the other side of the connection had already run
into a protocol violation and shut down we could previously have
dereferenced a null cookie. This patch fixes the code so it now throws
in such scenarios.
This commit is contained in:
Benjamin Bannier 2024-11-04 16:15:09 +01:00
parent 0028ba320d
commit 93c201df57
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/spicy/runtime-support.cc
View file

@ -285,11 +285,13 @@ void rt::debug(const Cookie& cookie, const std::string& msg) {
inline rt::cookie::FileStateStack* _file_state_stack(rt::Cookie* cookie) {
auto _ = hilti::rt::profiler::start("zeek/rt/file_state_stack");
if ( cookie ) {
if ( auto c = cookie->protocol )
return c->is_orig ? &c->fstate_orig : &c->fstate_resp;
else if ( auto f = cookie->file )
return &f->fstate;
else
}
throw rt::ValueUnavailable("no current connection or file available");
}