0001-fix-bug-report-sr-109133-Heap-buffer-overflow-in-uti.patch 886 B

123456789101112131415161718192021222324252627282930
  1. From 7e0793e15e21f68337e130c67b031ca38edf055f Mon Sep 17 00:00:00 2001
  2. From: Aymeric Moizard <amoizard@gmail.com>
  3. Date: Mon, 5 Sep 2016 15:01:53 +0200
  4. Subject: [PATCH] * fix bug report: sr #109133: Heap buffer overflow in
  5. utility function *osip_clrncpy* https://savannah.gnu.org/support/?109133
  6. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
  7. ---
  8. src/osipparser2/osip_port.c | 4 +++-
  9. 1 file changed, 3 insertions(+), 1 deletion(-)
  10. diff --git a/src/osipparser2/osip_port.c b/src/osipparser2/osip_port.c
  11. index 0e64147..d8941b0 100644
  12. --- a/src/osipparser2/osip_port.c
  13. +++ b/src/osipparser2/osip_port.c
  14. @@ -1291,8 +1291,10 @@ osip_clrncpy (char *dst, const char *src, size_t len)
  15. char *p;
  16. size_t spaceless_length;
  17. - if (src == NULL)
  18. + if (src == NULL || len == 0) {
  19. + *dst = '\0';
  20. return NULL;
  21. + }
  22. /* find the start of relevant text */
  23. pbeg = src;
  24. --
  25. 2.11.0