coturn_server

Project Repo: https://github.com/coturn/coturn/tree/47008229cefaff6bfc4b231642d342f99712a5ad/src/server

Case 1

Program locations:

Bug traces:

< ch_info *ret = NULL;, ch_map_get>
<ch_map_get(&(a->chns), chnum, 1), allocation_get_new_ch_info>

Explanation:

The NULL value of pointer ret at line 3 is returned to the caller at line 47 when map is NULL.
The NULL value returned from ch_map_get at line 9 is dereferenced at line 11 without any NULL check.

Case 2

Program locations:

https://github.com/coturn/coturn/tree/47008229cefaff6bfc4b231642d342f99712a5ad/src/server/ns_turn_server.c#L1957

Bug traces:

< ts_ur_super_session *ss=NULL;, tcp_client_input_handler_rfc6062data>

Explanation:

NULL value from line 10 can reach here without NULL check when a is NULL.