bugCERTI - Bugs: bug #24636, rtig securityserver null pointer...

 
 

bug #24636: rtig securityserver null pointer derefeneciation

Submitted by:  Enrico von Otte <vonotte>
Submitted on:  Thu 23 Oct 2008 11:41:27 AM UTC  
 
Category: CERTISeverity: 3 - Normal
Item Group: Software errorStatus: In Progress
Privacy: PublicAssigned to: Eric NOULARD <erk>
Open/Closed: OpenRelease: 3.3.1
Reproducibility: Every TimeFixed Release: Unknown

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Thu 23 Oct 2008 04:07:38 PM UTC, comment #1:

There is a small mess regarding killed/crashed federate
in this area.

Two classes are concerned:
SecurityServer
SocketServer

The SocketServer is a list of
federation <--> federate link

federation is RTIG
federate is the RTIA of the concerned federate

The link itself is represented by a
SocketTuple object which contains the different
kind of link between the federate and the RTIG
(currently one UDP and on TCP).

the SecurityServer concerned by the bug is
a CERTI specific extension for handling security
level in HLA.
see

The SecurityServer is reponsible
of checking whether if a specific federate is allowed
to access to particular data.
There is one SecurityServer for each federation
but there is a single (unique) SocketServer for
the RTIG.

Both server have their own "getSocketLink"
SecurityServer instance is calling the underlying
ServerSocket::getSocketLink with added
Security Access control which is federation specific.

We should review "GLOBALLY" how killed federate should be
handled by the RTIG and in particular by
ServerSocket.

I'll work on this.

Eric NOULARD <erk>
Project AdministratorIn charge of this item.
Thu 23 Oct 2008 11:41:27 AM UTC, original submission:

method SecurityServer::getSocketLink should return the socket-object associated with a given federate. if federate is killed or some other error lead to deletion of the federate and or it's socket this method gets a null pointer.

it checks against null and returns simply a null pointer -- what is an error, since this null pointer is dereferenced without a further check in SecurityServer::canFederateAccessData.

SecurityServer::getSocketLink should generate a RTI::RTIinternalError exception in case of socket object is null.

Enrico von Otte <vonotte>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by erk (Posted a comment)
  • -unavailable- added by vonotte (Submitted the item)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Thu 23 Oct 2008 04:07:38 PM UTCerkStatusNone=>In Progress
      Assigned toNone=>erk

    Back to the top


    Powered by Savane 3.1-cleanup1