Actions
Bug #4952
closedscan-build: Access to field 'de_state' results in a dereference of a null pointer
Affected Versions:
Effort:
Difficulty:
Label:
Description
CC detect.o
detect.c:1238:38: warning: Access to field 'de_state' results in a dereference of a null pointer (loaded from variable 'txd') [core.NullDereference]
DetectEngineState *tx_de_state = txd->de_state;
^~~~~~~~~~~~~
1 warning generated.
txd is almost everywhere a part of the transaction structure, where it can't be NULL if we have a tx. However in the case of HTTP we can have a tx w/o a HTPTxUserData object which means it is possible to have a NULL txd in some edge cases.
Now a HTP tx w/o a HTPTxUserData is useless from the Suricata perspective, so I wonder if we can somehow "hide" a tx like that from Suricata.
Actions