in_exec_wasi: fix possible NULL deref

`tmpfile()` can return NULL and this is not checked for at the moment. If indeed it returns NULL then the call on line 70 `fileno(stdoutp)` will cause a NULL dereference. Signed-off-by: David Korczynski <[email protected]>
fluent · Jul 7, 2023 · c58fc4f · c58fc4f
1 parent fb7d4c8
commit c58fc4f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/plugins/in_exec_wasi/in_exec_wasi.c b/plugins/in_exec_wasi/in_exec_wasi.c
@@ -59,6 +59,11 @@ static int in_exec_wasi_collect(struct flb_input_instance *ins,
     size_t out_size = 0;
     struct flb_time out_time;
 
+    /* Validate the temporary file was created */
+    if (stdoutp == NULL) {
+        return -1;
+    }
+
     if (ctx->oneshot == FLB_TRUE) {
         ret = flb_pipe_r(ctx->ch_manager[0], &val, sizeof(val));
         if (ret == -1) {