/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
/*
 * This file is part of the LibreOffice project.
 *
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/.
 *
 * This file incorporates work covered by the following license notice:
 *
 *   Licensed to the Apache Software Foundation (ASF) under one or more
 *   contributor license agreements. See the NOTICE file distributed
 *   with this work for additional information regarding copyright
 *   ownership. The ASF licenses this file to you under the Apache
 *   License, Version 2.0 (the "License"); you may not use this file
 *   except in compliance with the License. You may obtain a copy of
 *   the License at http://www.apache.org/licenses/LICENSE-2.0 .
 */
 
#include <osl/thread.hxx>
#include <osl/diagnose.h>
 
#include <rtl/process.h>
#include <rtl/byteseq.hxx>
 
#include <uno/threadpool.h>
 
#include "current.hxx"
 
using namespace ::osl;
using namespace ::cppu;
 
static void createLocalId( sal_Sequence **ppThreadId )
{
    rtl_byte_sequence_constructNoDefault( ppThreadId , 4 + 16 );
    sal_uInt32 id = osl::Thread::getCurrentIdentifier();
    (*ppThreadId)->elements[0] = id & 0xFF;
    (*ppThreadId)->elements[1] = (id >> 8) & 0xFF;
    (*ppThreadId)->elements[2] = (id >> 16) & 0xFF;
    (*ppThreadId)->elements[3] = (id >> 24) & 0xFF;
    rtl_getGlobalProcessId( reinterpret_cast<sal_uInt8 *>(&(*ppThreadId)->elements[4]) );
}
 
extern "C" void SAL_CALL
uno_getIdOfCurrentThread( sal_Sequence **ppThreadId ) noexcept
{
    IdContainer& id = getIdContainer();
    if (!id.bInit)
    {
        // first time, that the thread enters the bridge
        createLocalId( ppThreadId );
 
        // TODO
        // note : this is a leak !
        id.pLocalThreadId = *ppThreadId;
        id.pCurrentId = *ppThreadId;
        id.nRefCountOfCurrentId = 1;
        rtl_byte_sequence_acquire( id.pLocalThreadId );
        rtl_byte_sequence_acquire( id.pCurrentId );
        id.bInit = true;
    }
    else
    {
        id.nRefCountOfCurrentId ++;
        if( *ppThreadId )
        {
            rtl_byte_sequence_release( *ppThreadId );
        }
        *ppThreadId = id.pCurrentId;
        rtl_byte_sequence_acquire( *ppThreadId );
    }
}
 
extern "C" void SAL_CALL uno_releaseIdFromCurrentThread() noexcept
{
    IdContainer& id = getIdContainer();
    OSL_ASSERT( id.bInit );
    OSL_ASSERT( id.nRefCountOfCurrentId );
 
    id.nRefCountOfCurrentId --;
    if( ! id.nRefCountOfCurrentId && (id.pLocalThreadId != id.pCurrentId) )
    {
        rtl_byte_sequence_assign( &(id.pCurrentId) , id.pLocalThreadId );
    }
}
 
extern "C" sal_Bool SAL_CALL uno_bindIdToCurrentThread( sal_Sequence *pThreadId ) noexcept
{
    IdContainer& id = getIdContainer();
    if (!id.bInit)
    {
        id.pLocalThreadId = nullptr;
        createLocalId( &(id.pLocalThreadId) );
        id.nRefCountOfCurrentId = 1;
        id.pCurrentId = pThreadId;
        rtl_byte_sequence_acquire(id.pCurrentId);
        id.bInit = true;
    }
    else
    {
        OSL_ASSERT( 0 == id.nRefCountOfCurrentId );
        if( 0 == id.nRefCountOfCurrentId )
        {
            rtl_byte_sequence_assign(&( id.pCurrentId ), pThreadId );
            id.nRefCountOfCurrentId ++;
        }
        else
        {
            return false;
        }
 
    }
    return true;
}
 
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */

↑ V522 Dereferencing of the null pointer 'ppThreadId' might take place. The null pointer is passed into 'createLocalId' function. Inspect the first argument. Check lines: 37, 93.