Ticket #137 (closed defect: fixed)

Opened 12 years ago

Last modified 12 years ago

Potential memory overwrite in pjmedia session.c (thanks David Clark)

Reported by: bennylp Owned by: bennylp
Priority: major Milestone: release-0.5.10.2
Component: pjmedia Version: 0.5.10.1
Keywords: Cc:
Backport to 1.x milestone: Backported:

Description

session.c line 519:

    /* Copy stream info (this simple memcpy may break sometime) */
    pj_memcpy(session->stream_info, si->stream_info,
          si->stream_cnt * sizeof(pjmedia_session_info));

while it should be:

session.c line 519
    /* Copy stream info (this simple memcpy may break sometime) */
    pj_memcpy(session->stream_info, si->stream_info,
          si->stream_cnt * sizeof(pjmedia_stream_info));

Thanks David Clark for reporting!

Change History

comment:1 Changed 12 years ago by bennylp

  • Status changed from new to closed
  • Resolution set to fixed
  • Summary changed from Potential memory overwrite in pjmedia session.c to Potential memory overwrite in pjmedia session.c (thanks David Clark)

Fixed in r1007.

comment:2 Changed 12 years ago by bennylp

  • Component changed from applications to pjmedia
Note: See TracTickets for help on using tickets.