Commit: 4e199d8d39d6c181c7bca66000ab297f3c57f3bd
Parent: bb30d009208f7fd69cd12c8f1c3e150c5cb11c02
Author: Luiz Augusto von Dentz <luiz.dentz-von@nokia.com>
Committer: Marcel Holtmann <marcel@holtmann.org>
Date: 2012-12-04 23:48:23
Tree: aebb3d1e112c731074886c8d29626edbdce87bec

obexd: fix possible buffer overflow When checking if driver matches target or who sizes were not being verified which can cause invalid accesses when the received target size is bigger than driver's target size. To fix this memncmp0 was introduced to takes both sizes and compares them before calling memcmp.

Diffstat

M obexd/src/mimetype.c | 4 ++- -
M obexd/src/obex.c | 7 +++++- -
M obexd/src/obex.h | 2 +-
M obexd/src/service.c | 6 ++++- -

4 files changed, 12 insertions(+), 7 deletions(-)

View Full Diff | Patch