bugCERTI - Bugs: bug #24636, rtig securityserver null pointer...

 
 

bug #24636: rtig securityserver null pointer derefeneciation

Submitter:  Enrico von Otte <vonotte>
Submitted:  Thu 23 Oct 2008 11:41:27 AM UTC
   
 
Category:  CERTI Severity:  * 3 - Normal
Item Group:  Software error Status:  In Progress
Privacy:  Public Assigned to:  erk
Open/Closed:  Open Release:  * 3.3.1
Reproducibility:  Every Time Fixed Release:  * Unknown
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 23 Oct 2008 04:07:38 PM UTC, comment #1: 

There is a small mess regarding killed/crashed federate
in this area.

Two classes are concerned:
   SecurityServer
   SocketServer

The SocketServer is a list of
federation <--> federate link

federation is RTIG
federate is the RTIA of the concerned federate

The link itself is represented by a
SocketTuple object which contains the different
kind of link between the federate and the RTIG
(currently one UDP and on TCP).

the SecurityServer concerned by the bug is
a CERTI specific extension for handling security
level in HLA.
see

The SecurityServer is reponsible
of checking whether if a specific federate is allowed
to access to particular data.
There is one SecurityServer for each federation
but there is a single (unique) SocketServer for
the RTIG.

Both server have their own "getSocketLink"
SecurityServer instance is calling the underlying
ServerSocket::getSocketLink  with added
Security Access control which is federation specific.

We should review "GLOBALLY" how killed federate should be
handled by the RTIG and in particular by
ServerSocket.

I'll work on this.

Eric NOULARD <erk>
Group administrator
Thu 23 Oct 2008 11:41:27 AM UTC, original submission:  

method SecurityServer::getSocketLink should return the socket-object associated with a given federate. if federate is killed or some other error lead to deletion of the federate and or it's socket this method gets a null pointer.

it checks against null and returns simply a null pointer -- what is an error, since this null pointer is dereferenced without a further check in SecurityServer::canFederateAccessData.

SecurityServer::getSocketLink should generate a RTI::RTIinternalError exception in case of socket object is null.

Enrico von Otte <vonotte>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by erk (Posted a comment)
  • -email is unavailable- added by vonotte (Submitted the item)
  •  

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-10-23 erk StatusNone In Progress
        Assigned toNone erk

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code