Opened 16 years ago

Closed 16 years ago

Last modified 16 years ago

#11245 closed (fixed)

contrib.gis.utils.GeoIP._check_query does not check for NULL pointer to _city or _country GeoIP libraries

Reported by: andrewfox Owned by: jbronn
Component: GIS Version: 1.0
Severity: Keywords: geodjango, gis, geoip, ctype
Cc: andrewfox Triage Stage: Unreviewed
Has patch: no Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no

Description (last modified by jbronn)

In the _check_query method of geoip.py lines 344, 346, and 348 should not check self._city and/or self._country for 'is None' but instead for 'not self._city' or 'not self._country'. self._city and self._country are ctype wrapped pointers; so even if they returned NULL from the C library (e.g. fopen failure), self._city and self._country would still be not None but instead their pointer values would be None. Ctype checking for null pointers could be instead achieved by checking for 'not self._city'.

Referenced code (django/contrib/gis/utils/geoip.py (~line 344):

        # Extra checks for the existence of country and city databases.
        if city_or_country and self._country is None and self._city is None:
            raise GeoIPException('Invalid GeoIP country and city data files.')
        elif country and self._country is None:
            raise GeoIPException('Invalid GeoIP country data file: %s' % self._country_file)
        elif city and self._city is None:
            raise GeoIPException('Invalid GeoIP city data file: %s' % self._city_file)

Change History (5)

comment:1 by andrewfox, 16 years ago

Cc: andrewfox added

comment:2 by andrewfox, 16 years ago

Lines actually 222, 224, and 226.

comment:3 by jbronn, 16 years ago

Component: Contrib appsGIS
Description: modified (diff)
Owner: changed from nobody to jbronn

comment:4 by jbronn, 16 years ago

Resolution: fixed
Status: newclosed

(In [10979]) Fixed #11245, #11246 -- Fixed validity check of GeoIP pointers and leaking of their references; also clarified initialization, fixed a stale test, added comments about version compatibility, and did some whitespace cleanup.

comment:5 by jbronn, 16 years ago

(In [10980]) [1.0.X] Fixed #11245, #11246 -- Fixed validity check of GeoIP pointers and leaking of their references; also clarified initialization, fixed a stale test, added comments about version compatibility, and did some whitespace cleanup.

Backport of r10979 from trunk.

Note: See TracTickets for help on using tickets.
Back to Top