Project

General

Profile

Bug #4952

Updated by Victor Julien over 2 years ago

<pre> 
   CC         detect.o 
 detect.c:1238:38: warning: Access to field 'de_state' results in a dereference of a null pointer (loaded from variable 'txd') [core.NullDereference] 
     DetectEngineState *tx_de_state = txd->de_state; 
                                      ^~~~~~~~~~~~~ 
 1 warning generated. 
 </pre> 
 @txd@ is *almost* everywhere a part of the transaction structure, where it can't be by NULL if we have a tx. However in the case of HTTP we can have a tx w/o a @HTPTxUserData@ object which means it is possible to have a NULL @txd@ in some edge cases. 

 Now a HTP tx w/o a @HTPTxUserData@ is useless from the Suricata perspective, so I wonder if we can somehow "hide" a tx like that from Suricata. 

 Introduced in https://github.com/OISF/suricata/commit/1ad71b96daa2b2655691cfce2a15ccd754d9b290#diff-ee484ae4b77e59eb8b6b50f628c84ab626bd6178a6d43e1219dbc9619be7e027R1238

Back