From ed12a86f1b4b488b08bc32d67009ab16df132cf1 Mon Sep 17 00:00:00 2001 From: "js126.lee" Date: Wed, 11 Jan 2017 13:48:25 +0900 Subject: [PATCH] Adding NULL checking input parameter in SRMRequestHandler Patch 1: upload patch Change-Id: I869fd8d2d3198033be3cb36fe4fa1e7f602ba823 Signed-off-by: js126.lee Reviewed-on: https://gerrit.iotivity.org/gerrit/16299 Reviewed-by: Joonghwan Lee Reviewed-by: dongik Lee Reviewed-by: Chul Lee Tested-by: jenkins-iotivity Reviewed-by: Randeep Singh --- resource/csdk/security/src/secureresourcemanager.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/resource/csdk/security/src/secureresourcemanager.c b/resource/csdk/security/src/secureresourcemanager.c index 4c41799..a91b10f 100644 --- a/resource/csdk/security/src/secureresourcemanager.c +++ b/resource/csdk/security/src/secureresourcemanager.c @@ -152,6 +152,12 @@ void SRMRequestHandler(const CAEndpoint_t *endPoint, const CARequestInfo_t *requ } //Check the URI has the query and skip it before checking the permission + if (NULL == requestInfo->info.resourceUri) + { + OIC_LOG(ERROR, TAG, "Invalid resourceUri"); + return; + } + char *uri = strstr(requestInfo->info.resourceUri, "?"); int position = 0; if (uri) -- 2.7.4