Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potential nil-dereference found while fuzzing #611

Closed
jlk opened this issue Mar 10, 2021 · 1 comment
Closed

Potential nil-dereference found while fuzzing #611

jlk opened this issue Mar 10, 2021 · 1 comment
Assignees

Comments

@jlk
Copy link
Contributor

jlk commented Mar 10, 2021

  • terrascan version:

Description

While testing fuzzbuzz, an issue was discovered where we attempt to use a yaml decoder without testing if it is non-nil

In pkg/utils/yaml.go around line 103:

	dec := yaml.NewDecoder(bytes.NewReader(byteArray))

	i := 0
	for {
		// each iteration extracts and marshals one yaml document
		var value interface{}
		err := dec.Decode(&value)
@kanchwala-yusuf
Copy link
Contributor

Since the issue is with the fuzzing library, closing this issue. Please reopen if necessary!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants