id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	field_blocks	field_dependson	field_seealso
364	Possible NULL pointer dereference in async.c	Martin Decky	Jiří Zárevúcky	"There are several possible cases of NULL pointer dereference in async.c, e.g. due to async_send_fast() returning a zero AID (because of a failed malloc()) and subsequently dereferencing the AID as amsg_t in async_wait_for().

The problem needs to be mitigated either by using a blocking malloc() (but this might be complicated and deadlock-prone) or making all the ""tail"" functions such as async_wait_for() more robust."	defect	closed	major	0.7.2	helenos/lib/c	mainline	fixed