city_create_unit() segfaults when punit is null

• Auswertung: (Anonym)
• Verantwortlicher: cazfi
• Typ: Patches
• Status: Geschlossen
• Komponente: Server
• Meilenstein: 3.1.0-beta3 (closed)
• Priorität: 5 - Mittel
• Schweregrad: 5 - Mittel
• Lösung: Gefixt
• Datei: 1

Details Antworten

This wasn't caught before because it's very rare. However, there may be ways to get units which are null in some situations like multiple build slots, etc. FCW server experienced it and had to fix it.

 static struct unit *city_create_unit(struct city *pcity,
                                      const struct unit_type *utype)
 {
   if (!pcity || !utype) return NULL;   // 17Oct2022 attempt to avoid segfault
 
   struct player *pplayer = city_owner(pcity);
   struct unit *punit;
   int saved_unit_id;
                       city_production_unit_veteran_level(pcity, utype),
                       pcity->id, 0);
   pplayer->score.units_built++;
   if (!punit) {
           notify_conn(game.est_connections, city_tile(pcity),
                   E_WONDER_WILL_BE_BUILT, ftc_server,
                   _("Notice: %s in %s creating illegal segfault. Report to admin immediately!"),
                   utype_name_translation(utype), 
                   city_link(pcity));
     return NULL;              // 17Oct2022 line below was segfault:
   }
   saved_unit_id = punit->id;

Ticket-Verlauf (3/5 Historien)

2022-10-17 20:58 Aktualisiert von: None

• New Ticket "city_create_unit() segfaults when punit is null" created

2022-10-17 21:35 Aktualisiert von: cazfi

Kommentar Antworten

Reply To (Anonymous)

This wasn't caught before because it's very rare. However, there may be ways to get units which are null in some situations like multiple build slots, etc. FCW server experienced it and had to fix it.

Those cases with multiple build slots producing NULL units seem like result of FCW specific bugs #45894 and #45895

2023-06-09 07:34 Aktualisiert von: cazfi

• File 0033-Give-city_create_unit-parameters-nonnull-attribute.patch (File ID: 12609) is attached

2023-06-09 07:36 Aktualisiert von: cazfi

• Verantwortlicher Update from (Keine) to cazfi
• Lösung Update from Keine to Accepted
• Meilenstein Update from (Keine) to 3.1.0-beta3 (closed)
• Komponente Update from (Keine) to Server
• Typ Update from Fehler to Patches

Kommentar Antworten

Reply To cazfi

Those cases with multiple build slots producing NULL units seem like result of FCW specific bugs #45894 and #45895

Attached patch gives those parameters nonnull attribute, to make it likely that in the future such bugs get caught as soon as they get created.

2023-06-12 03:23 Aktualisiert von: cazfi

• Status Update from Offen to Geschlossen
• Lösung Update from Accepted to Gefixt