Null Dereference Discovered From ANTLR3 Generated Code in NCalc

[ssaputo]

This is a discussion regarding NCalc and ANTLR3.

The project I am currently working on uses the NCalc library to evaluate expressions. This library depends on the ANTLR3 nuget package.

ANTLR3's generated code is getting flagged as a possible Null Dereference issue in Micro Focus's static code analysis tool called Fortify. See the following link to the issue ticket generated in NCalc and the discussion from its contributor:

• Null Dereference discovered ncalc/ncalc#57

I need to report these types of findings from Fortify to our customer and provide mitigation strategies. I was wondering if it is possible to look into this and provide any information you can as to what plans, if any, are in the works to resolve such issues in ANTLR3, or if they are already resolved in ANTLR4.

Thanks in advance!