Re: Potential Null Pointer Dereference in resizebox method from lauxlib.c

[Andrew Gierth <andrew@...>]

>>>>> "Yongchao" == Yongchao Wang <chaowyc@gmail.com> writes:

 Yongchao> Hi all,

 Yongchao> We have detected that the resizebox method may trigger a null
 Yongchao> pointer dereference. Here is a possible vulnerable trace:

Static analysis is all very well, but it leads to pointless reports of
non-bugs like this.

resizebox is called only when the referenced stack position is already
known to contain a box (provided that the luaL_Buffer protocol is being
properly followed, which is the responsibility of the caller). As such,
the lua_touserdata call cannot return NULL and there is no bug.

-- 
Andrew.