View Issue Details

IDProjectCategoryView StatusLast Update
0009648Talermerchant backendpublic2025-05-10 02:11
Reporterschanzen Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Target Version1.0Fixed in Version1.0 
Summary0009648: null ptr deref in depositcheck
DescriptionLine 995 in taler-merchant-depositcheck dereferences the cfgfile pointer which, as the comment of the function itself explains, may be null.
Steps To ReproduceFollow guide from https://docs.taler.net/taler-merchant-manual.html#launching-the-backend after installing from source. Watch SIGSEGV happen.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2025-03-23 11:24

manager   ~0024287

Fixed in cd2a8118..c1e45623

Issue History

Date ModifiedUsernameFieldChange
2025-03-22 12:59schanzenNew Issue
2025-03-22 12:59schanzenStatusnew => assigned
2025-03-22 12:59schanzenAssigned To => Christian Grothoff
2025-03-22 13:09Christian GrothoffCategorymechant backend => merchant backend
2025-03-23 11:24Christian GrothoffStatusassigned => informing
2025-03-23 11:24Christian GrothoffResolutionopen => fixed
2025-03-23 11:24Christian GrothoffFixed in Version => 1.0
2025-03-23 11:24Christian GrothoffNote Added: 0024287
2025-05-10 02:11Christian GrothoffStatusinforming => closed