瀏覽代碼

db2_ops: safety check for input parameter

Daniel-Constantin Mierla 7 年之前
父節點
當前提交
1be7a6903a
共有 2 個文件被更改,包括 4 次插入0 次删除
  1. 3 0
      src/modules/db2_ops/db2_ops.c
  2. 1 0
      src/modules/jsonrpcc/jsonrpc_io.c

+ 3 - 0
src/modules/db2_ops/db2_ops.c

@@ -201,6 +201,9 @@ static int split_fields(char *part, int *n, struct xlstr **strs) {
 	int i, res;
 	char *c, *fld;
 
+	if(part==NULL || *part=='\0')
+		return -1;
+
 	*n = 0;
 	*strs = 0;
 	c = part;

+ 1 - 0
src/modules/jsonrpcc/jsonrpc_io.c

@@ -219,6 +219,7 @@ void cmd_pipe_cb(int fd, short event, void *arg)
 		if (timerfd_settime(timerfd, 0, itime, NULL) == -1) 
 		{
 			LM_ERR("Could not set timer.");
+			pkg_free(itime);
 			goto error;
 		}
 		pkg_free(itime);