View Issue Details

IDProjectCategoryView StatusLast Update
0010157Talermerchant backendpublic2025-10-31 19:49
Reporteroec Assigned Toschanzen Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilitysometimes
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version1.1Fixed in Version1.1 
Summary0010157: Use of uninitialized memory for authentication logic
Descriptiontaler-merchant-httpd.c: In function ‘permission_in_scope’:
taler-merchant-httpd.c:392:33: warning: ‘is_read_perm’ may be used uninitialized [-Wmaybe-uninitialized]
  391 | if ( (0 == strcmp ("*-read",
      | ~~~~~~~~~~~~~~~~~~~~~~~
  392 | perm)) &&
      | ~~~~~~~^~
  393 | (is_read_perm) )
      | ~~~~~~~~~~~~~~
taler-merchant-httpd.c:340:8: note: ‘is_read_perm’ was declared here
  340 | bool is_read_perm;
      | ^~~~~~~~~~~~
taler-merchant-httpd.c:385:33: warning: ‘is_write_perm’ may be used uninitialized [-Wmaybe-uninitialized]
  384 | if ( (0 == strcmp ("*-write",
      | ~~~~~~~~~~~~~~~~~~~~~~~~
  385 | perm)) &&
      | ~~~~~~~^~
  386 | (is_write_perm) )
      | ~~~~~~~~~~~~~~~
taler-merchant-httpd.c:341:8: note: ‘is_write_perm’ was declared here
  341 | bool is_write_perm;
      | ^~~~~~~~~~~~~
Steps To Reproduce./bootstrap
make -j
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

schanzen

2025-07-08 09:49

administrator   ~0025443

Fix committed to master branch.

Issue History

Date ModifiedUsernameFieldChange
2025-07-08 08:44oecNew Issue
2025-07-08 09:49schanzen
2025-07-08 09:49schanzenNote Added: 0025443
2025-07-08 09:49schanzenAssigned To => schanzen
2025-07-08 09:49schanzenStatusnew => informing
2025-07-08 09:49schanzenResolutionopen => fixed
2025-10-18 22:51Christian GrothoffFixed in Version => 1.1
2025-10-18 22:51Christian GrothoffTarget Version => 1.1
2025-10-31 19:49Christian GrothoffStatusinforming => closed