aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFabian Meumertzheim <meumertzheim@code-intelligence.com>2023-05-30 15:47:48 +0200
committerFabian Meumertzheim <fabian@meumertzhe.im>2023-05-31 11:25:15 +0200
commit68039d25c25ef8e1b3123fd6dcd84cb2fd7a3b75 (patch)
tree4c7ddc06c145a586fa7f2108177ab12bbd698cc2
parentbe1a7e56d71d4d8dfe71c08f216e0314b4c2f6e6 (diff)
downloadjazzer-api-68039d25c25ef8e1b3123fd6dcd84cb2fd7a3b75.tar.gz
sanitizers: Guard against NPE in JNDI sanitizer
-rw-r--r--sanitizers/src/main/java/com/code_intelligence/jazzer/sanitizers/NamingContextLookup.kt2
1 files changed, 1 insertions, 1 deletions
diff --git a/sanitizers/src/main/java/com/code_intelligence/jazzer/sanitizers/NamingContextLookup.kt b/sanitizers/src/main/java/com/code_intelligence/jazzer/sanitizers/NamingContextLookup.kt
index 80db7d09..51cf6453 100644
--- a/sanitizers/src/main/java/com/code_intelligence/jazzer/sanitizers/NamingContextLookup.kt
+++ b/sanitizers/src/main/java/com/code_intelligence/jazzer/sanitizers/NamingContextLookup.kt
@@ -49,7 +49,7 @@ object NamingContextLookup {
)
@JvmStatic
fun lookupHook(method: MethodHandle?, thisObject: Any?, args: Array<Any?>, hookId: Int): Any {
- val name = args[0] as String
+ val name = args[0] as? String ?: throw CommunicationException()
if (name.startsWith(RMI_MARKER) || name.startsWith(LDAP_MARKER)) {
Jazzer.reportFindingFromHook(
FuzzerSecurityIssueCritical(