Opened 18 years ago

Closed 18 years ago

Last modified 18 years ago

#137 closed defect (fixed)

Potential memory overwrite in pjmedia session.c (thanks David Clark)

Reported by: bennylp Owned by: bennylp
Priority: major Milestone: release-0.5.10.2
Component: pjmedia Version: 0.5.10.1
Keywords: Cc:
Backport to 1.x milestone: Backported:

Description

session.c line 519:

    /* Copy stream info (this simple memcpy may break sometime) */
    pj_memcpy(session->stream_info, si->stream_info,
          si->stream_cnt * sizeof(pjmedia_session_info));

while it should be:

session.c line 519
    /* Copy stream info (this simple memcpy may break sometime) */
    pj_memcpy(session->stream_info, si->stream_info,
          si->stream_cnt * sizeof(pjmedia_stream_info));

Thanks David Clark for reporting!

Change History (2)

comment:1 Changed 18 years ago by bennylp

  • Resolution set to fixed
  • Status changed from new to closed
  • Summary changed from Potential memory overwrite in pjmedia session.c to Potential memory overwrite in pjmedia session.c (thanks David Clark)

Fixed in r1007.

comment:2 Changed 18 years ago by bennylp

  • Component changed from applications to pjmedia
Note: See TracTickets for help on using tickets.