Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
-
linux fc6
Description
In the function axis2_raw_xml_in_out_msg_recv_invoke_business_logic_sync at line 394, the fault details is incorrelty prints, it it not a string but the formatter %s is used.
Here is the valgrind output:
=30186== Thread 3:
==30186== Invalid read of size 1
==30186== at 0x4006773: strlen (mc_replace_strmem.c:242)
==30186== by 0x6841FE: vfprintf (in /lib/libc-2.5.so)
==30186== by 0x6A2F63: vsnprintf (in /lib/libc-2.5.so)
==30186== by 0x40503B2: axutil_log_impl_log_debug (log.c:418)
==30186== by 0x409D157: axis2_raw_xml_in_out_msg_recv_invoke_business_logic_sync (raw_xml_in_out_msg_recv.c:394)
==30186== by 0x409C243: axis2_msg_recv_invoke_business_logic (msg_recv.c:397)
==30186== by 0x409C873: axis2_msg_recv_receive_impl (msg_recv.c:319)
==30186== by 0x409C2C3: axis2_msg_recv_receive (msg_recv.c:436)
==30186== by 0x4091A83: axis2_engine_receive (engine.c:318)
==30186== by 0x4019DAD: axis2_http_transport_utils_process_http_post_request (http_transport_utils.c:658)
==30186== by 0x4016B03: axis2_http_worker_process_request (http_worker.c:908)
==30186== by 0x4123ED0: axis2_svr_thread_worker_func (http_svr_thread.c:259)
==30186== Address 0x43e0bfc is 0 bytes after a block of size 4 alloc'd
==30186== at 0x4005858: malloc (vg_replace_malloc.c:207)
==30186== by 0x4036075: axiom_soap_fault_detail_create (soap_fault_detail.c:36)
==30186== by 0x4036125: axiom_soap_fault_detail_create_with_parent (soap_fault_detail.c:67)
==30186== by 0x409D12D: axis2_raw_xml_in_out_msg_recv_invoke_business_logic_sync (raw_xml_in_out_msg_recv.c:392)
==30186== by 0x409C243: axis2_msg_recv_invoke_business_logic (msg_recv.c:397)
==30186== by 0x409C873: axis2_msg_recv_receive_impl (msg_recv.c:319)
==30186== by 0x409C2C3: axis2_msg_recv_receive (msg_recv.c:436)
==30186== by 0x4091A83: axis2_engine_receive (engine.c:318)
==30186== by 0x4019DAD: axis2_http_transport_utils_process_http_post_request (http_transport_utils.c:658)
==30186== by 0x4016B03: axis2_http_worker_process_request (http_worker.c:908)
==30186== by 0x4123ED0: axis2_svr_thread_worker_func (http_svr_thread.c:259)
==30186== by 0x405EF55: dummy_worker (thread_unix.c:93)