Hi Srinivas,

1/ For longDN, file name may be greater 255 characters
2/ variable 'tmpDn' is defined in local and "saAisNameLend(tmpDn, 
&logStreamName);" make put the local pointer to "logStreamName". So when 
saflogger use "logStreamName", The pointer that was contained in 
"logStreamName" may be invalid


---

** [tickets:#2659] log: saflogger possible use of invalid pointer**

**Status:** review
**Milestone:** 5.18.01
**Created:** Sun Oct 29, 2017 01:04 PM UTC by Johnny Lind
**Last Updated:** Fri Dec 08, 2017 10:29 AM UTC
**Owner:** Srinivas Siva Mangipudy


In case the option -a is given to saflogger with a application name longer than 
256 characters and extended names are used, saAisNameLend takes a local stack 
allocated char array "tmpDn" as argument and will store a pointer to the local 
variable in the SaNameT argument making the SaNameT having invalid pointer 
after the scope ends as tmpDn will be freed. The SaNameT variable is then later 
used to open a log stream.


---

Sent from sourceforge.net because [email protected] is 
subscribed to https://sourceforge.net/p/opensaf/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://sourceforge.net/p/opensaf/admin/tickets/options.  Or, if this is a 
mailing list, you can unsubscribe from the mailing list.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Opensaf-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets

Reply via email to