[Bug 17285] New: null pointer dereference possibility in failure cases server/named_pipe.c

http://bugs.winehq.org/show_bug.cgi?id=17285

Summary: null pointer dereference possibility in failure cases
                    server/named_pipe.c
           Product: Wine
           Version: unspecified
          Platform: Other
        OS/Version: other
            Status: UNCONFIRMED
          Severity: enhancement
          Priority: P2
         Component: wineserver
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

server/named_pipe.c - create_named_pipe

client = NULL;
        }
    }
    release_object( server );
    return &client->obj;
}

any failure will result in a segfault as the NULL client pointer is
defererenced.

[Bug 17285] null pointer dereference possibility in failure cases server/named_pipe.c

http://bugs.winehq.org/show_bug.cgi?id=17285

Juan Lang  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1

--- Comment #1 from Juan Lang   2009-02-06 17:21:41 ---
Confirming.  I'll send a patch shortly.

[Bug 17285] null pointer dereference possibility in failure cases server/named_pipe.c

http://bugs.winehq.org/show_bug.cgi?id=17285

--- Comment #2 from Juan Lang   2009-02-06 17:25:24 ---
Patch sent:
http://www.winehq.org/pipermail/wine-patches/2009-February/069079.html

[Bug 17285] null pointer dereference possibility in failure cases server/named_pipe.c

http://bugs.winehq.org/show_bug.cgi?id=17285

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #3 from Alexandre Julliard   2009-02-07 04:50:04 ---
There's no dereference here, just a fancy type cast.

[Bug 17285] null pointer dereference possibility in failure cases server/named_pipe.c

http://bugs.winehq.org/show_bug.cgi?id=17285

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #4 from Dmitry Timoshkov   2009-02-08 00:37:10 ---
Closing invalid.