Changeset 5092 for pjproject/trunk/pjlib/src/pj/sock_common.c

Timestamp:

May 12, 2015 1:56:29 AM (9 years ago)

Author:

ming

Message:

Re #1843 (misc): Fixed incorrect memcpy size in sock_common (thanks to Richard Mudgett for the patch and Joshua Colp for the report)

If an IPv6 UDP transport is configured with a link-local address, say fe80::21c:c0ff:fe4e:1a9e%eth0, which is an invalid format for an IPv6 address, it may cause crash. The invalid format causes pjproject to use an incorrect size parameter with memcpy().

File:

• pjproject/trunk/pjlib/src/pj/sock_common.c (modified) (1 diff)

pjproject/trunk/pjlib/src/pj/sock_common.c

@@ -181 +181 @@
             if (status==PJ_SUCCESS) {
                 pj_memcpy(&addr->ipv6.sin6_addr, &ai.ai_addr.ipv6.sin6_addr,
-                          sizeof(pj_sockaddr_in6));
+                          sizeof(addr->ipv6.sin6_addr));
             }
         }