There appears to be a potential buffer overflow that manifests itself in
less subtle ways in the Windows build. I am using Visual C++ Express 2010.

I've just spent about an hour or two trying to figure out where the buffer
overflow was, but couldn't find it yet. The crash happens in sec_verify_tls,
but doesn't consistently crash at the same place, depending on how you start
changing the code in that area. My guess is that there is a buffer overflow
somewhere before that part of the code, that will corrupt certain parts of
memory, but the effects of the corruption are only seen down the road when
sec_verify_tls gets called.

I recall we once had a similar problem, where the buffer overflow was caused
by a static length used for a certain key size. With certain servers, the
key was longer than the static length, meaning that the buffer overflow
would only occur when connecting to certain servers. I'm connecting to
Windows 7 SP1, so maybe we're facing a similar problem again.

Has anybody else been experiencing similar issues?
------------------------------------------------------------------------------
Simplify data backup and recovery for your virtual environment with vRanger.
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Discover what all the cheering's about.
Get your free trial download today. 
http://p.sf.net/sfu/quest-dev2dev2 
_______________________________________________
Freerdp-devel mailing list
Freerdp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/freerdp-devel

Reply via email to