---
** [tickets:#612] IMM: imm client crashes when using saImmOmSearchNext_2**
**Status:** unassigned
**Created:** Thu Oct 31, 2013 09:51 AM UTC by Zoran Milinkovic
**Last Updated:** Thu Oct 31, 2013 09:51 AM UTC
**Owner:** nobody
saImmOmSearchNext_2 code does not handle out_evt->info.imma.type well, and can
crash IMM client trying to free a random memory.
saImmOmsearchNext_2 assumes that out_evt->info.imma.type is always a type of
IMMA_EVT_ND2A_SEARCHNEXT_RSP, and according to the type,
IMMSV_OM_RSP_SEARCH_NEXT struct is freed.
If out_evt->info.imma.type is a type of IMMA_EVT_ND2A_IMM_ERROR, an IMM client
crashes.
The bug is seen in OpenSAF 4.2, and OpenSAF 4.3
---
Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is
subscribed to https://sourceforge.net/p/opensaf/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list.
------------------------------------------------------------------------------
Android is increasing in popularity, but the open development platform that
developers love is also attractive to malware creators. Download this white
paper to learn more about secure code signing practices that can help keep
Android apps secure.
http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk
_______________________________________________
Opensaf-tickets mailing list
Opensaf-tickets@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
