[AXIS2C-795] Possible seg fault looking for transport http prefix if specified URL omits :

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Fix Version/s: 1.2.0
• Component/s: core/clientapi
• Environment: Windows XP, Visual Studio 2005
• Assignee: Dinesh Weerapurage
• Reporter: Bill Mitchell
• Created: 29/Nov/07 23:35
• Updated: 05/Dec/07 19:03
• Resolved: 30/Nov/07 14:15

Description

In op_client.c, the function axis2_get_transport_from_url() is used to analyze the prefix to the URL. If the URL is malformed and does not contain a colon, the scan runs off the end of the url string.

The loop that reads:
start = url;
end = url;
while (end && (*end) != ':')
end++;
should read:
start = url;
end = url;
while ((*end) && (*end) != ':')
end++;

I'll admit to coming across this by inspection while tracking another problem. I have not actually forced the seg fault, as the loop will usually find a colon somewhere in memory and return a very large transport string.