[xsd-users] Regarding bugs - Type Mismatch: Signed to Unsigned

[Muralidhara B K]

Hi Boris,

Its better to add a NULL check prior to dereferencing pointer on line 737 (if (childTok->getMinLength() == 0)).
Please check if adding NULL check is  feasible .

Thanks & Regards,
Murali
SW Engr (Applications) - AutoPass 
+91 9611208625 
muralidhara.bk at microfocus.com



-----Original Message-----
From: Boris Kolpackov <boris at codesynthesis.com> 
Sent: 03 November 2022 07:17 PM
To: Muralidhara B K <muralidhara.bk at microfocus.com>
Cc: xsd-users at codesynthesis.com; Sruti Ranjan Majhi <sruti-ranjan.majhi at microfocus.com>; Vijay Kumar P <vijay.kumar7 at microfocus.com>; Adarsh Babu <adarsh.babu at microfocus.com>
Subject: Re: [xsd-users] Regarding bugs - Type Mismatch: Signed to Unsigned

Muralidhara B K <muralidhara.bk at microfocus.com> writes:

> Meanwhile we have found one more issue against 
> codeSynthesis/xerces-c-3.2.2/src/xercesc/util/regx/RegularExpression.hpp.
>
> Issue Type - Null Dereference
>
> Issue Description : - The function in RegularExpression.hpp can crash 
> the program by dereferencing a null pointer on line 737.

Is there more information via which executaion path this can happen? I took a look at the code and I don't see anything obvious. Without more details, this is not very useful since every pointer in C/C++ can potentially be NULL.