[Snort-devel] Crash in spo_xml

Martin Roesch roesch at ...402...
Mon Jun 18 13:43:18 EDT 2001


The existence of otn_tmp needs to be tested before setting pointers to
it willy nilly (especially when dereferencing).  There are situations
(portscans, for example) where otn_tmp will be NULL in the latest
versions of Snort, so it's very important to check that otn_tmp is
non-null before derefrencing its members.



More information about the Snort-devel mailing list