From 7585bf9e67e9c1d8e66c0392b67eed393ea2342d Mon Sep 17 00:00:00 2001 From: Petr Vaganov Date: Thu, 9 Jul 2026 15:04:53 +0700 Subject: [PATCH] fixes: add assert for ngx_stream_lua_get_req in ngx_stream_lua_sema_timeout_handler DEREF_OF_NULL.RET.STAT Return value of a function 'ngx_stream_lua_get_req' is dereferenced at ngx_stream_lua_semaphore.c:537 without checking for NULL, but it is usually checked for this function (35/41). Found by Linux Verification Center with Svace. Signed-off-by: Petr Vaganov --- src/ngx_stream_lua_semaphore.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/ngx_stream_lua_semaphore.c b/src/ngx_stream_lua_semaphore.c index f318f02e..26dea3ff 100644 --- a/src/ngx_stream_lua_semaphore.c +++ b/src/ngx_stream_lua_semaphore.c @@ -534,6 +534,7 @@ ngx_stream_lua_sema_timeout_handler(ngx_event_t *ev) sem->wait_count--; r = ngx_stream_lua_get_req(wait_co_ctx->co); + ngx_stream_lua_assert(r != NULL); ctx = ngx_stream_lua_get_module_ctx(r, ngx_stream_lua_module); ngx_stream_lua_assert(ctx != NULL);