[cups-devel] [LOW] STR #4378: cupsdGetPrivateAttrs() function in scheduler/policy.c is missing NULL check for input parameters

[msweet at apple.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR Resolved]

Till,

I'm looking at the code paths here and I don't see a path that would lead
to the policy pointer being NULL unless DefaultPolicyPtr is NULL, which is
impossible since cupsd automatically creates a default policy if none
exists.

I have added a bandaid with a critical log message (patch attached), but
please check the patches you apply to CUPS to see if any affect the policy
stuff...

Link: https://www.cups.org/str.php?L4378
Version: 1.7.1
Fix Version: 2.0-current (r11681)
Attachment: https://www.cups.org/strfiles.php/3292/str4378.patch
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: GPGTools - https://gpgtools.org
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=vdPP
-----END PGP SIGNATURE-----