Commit: e79417ed7185b150a056d4eb3a1ab528b91d2fc0
Parent: 44789fb8d94839d9c2b847d71faa6d649138b128
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Committer: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date: 2021-11-13 00:00:31
Tree: 47c490359d7072258522d75e3bee5a2da8755bc3

sdpd: Fix leaking buffers stored in cstates cache These buffer shall only be keep in cache for as long as they are needed so this would cleanup any client cstates in the following conditions: - There is no cstate on the response - No continuation can be found for cstate - Different request opcode - Respond with an error - Client disconnect Fixes: https://github.com/bluez/bluez/security/advisories/GHSA-3fqg-r8j5-f5xq

Diffstat

M src/sdpd-request.c | 170 ++++++++++++++++++++++++++++++++++++++++- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
M src/sdpd-server.c | 20 ++++++++++- - - - - - - - - -
M src/sdpd.h | 3 +++
M unit/test-sdp.c | 2 +-

4 files changed, 135 insertions(+), 60 deletions(-)

View Full Diff | Patch