-
Couldn't load subscription status.
- Fork 301
Open
@LM4O322
Description
In result of static analyse of nginx source code (including ngx_http_modsecurity_module) with Svace static analyzer I found error of cathegory "DEREFERENCE OF NULL" (checker finds situations where possible value equal to null can be dereferenced) in ngx_http_modsecurity_module.c
Initialization with possible null returned value here:
location = ngx_list_push(&r->headers_out.headers);
And dereference of location->key field here:
ngx_str_set(&location->key, "Location");
Found by Linux Verification Center with SVACE
Metadata
Metadata
Assignees
Labels
No labels