[Bug]: NULL Pointer Dereference Vulnerability

[Ald392]

Is there an existing issue for this?

• I have searched the existing issues

Environment

- Milvus version:
- Deployment mode(standalone or cluster):
- MQ type(rocksmq, pulsar or kafka):    
- SDK version(e.g. pymilvus v2.0.0rc2):
- OS(Ubuntu or CentOS): 
- CPU/Memory: 
- GPU: 
- Others:

Current Behavior

Static Scan reported NULL Pointer Dereference Vulnerability due to the following lines :

• milvus/internal/core/src/indexbuilder/init_c.cpp

  Line 25 in e4e18cb

  char* ret = reinterpret_cast<char*>(malloc(real_type.length() + 1));

• milvus/internal/core/src/log/Log.cpp

  Line 107 in e4e18cb

  FILE* thread_stat = fopen(filename, "r");

• milvus/internal/core/src/segcore/metrics_c.cpp

  Line 21 in e4e18cb

  char* res = (char*)malloc(len + 1);

• milvus/internal/core/src/segcore/segcore_init_c.cpp

  Line 76 in e4e18cb

  char* ret = reinterpret_cast<char*>(malloc(real_type.length() + 1));

Expected Behavior

No response

Steps To Reproduce

No response

Milvus Log

No response

Anything else?

No response

[yanliang567]

/assign @congqixia
please help to review the pr
/unassign

[Ald392]

@congqixia Can you please look into PR: #34836