Hi List,
in wtp_pack_sar_ack we have following:
unsigned char cpsn;
sprintf(&cpsn, "%c", psn);
this does not work, because sprintf tries to add /0 for an end of the
string, and cspn
is only one byte long.
simply doing:
unsigned char cpsn;
unsigned char damn[256];
sprintf(&cpsn, "%c", psn);
removes segfault, because now sprintf writes /0 to space reserved by
damn. But of
course one wants a real fix.
aarno
- Re: Bug in wtp_pack_sar_ack Aarno Syvänen
- Re: Bug in wtp_pack_sar_ack Bruno Rodrigues
- Re: Bug in wtp_pack_sar_ack Andreas Fink
- RE: Bug in wtp_pack_sar_ack Igor Ivoilov