https://bugs.freedesktop.org/show_bug.cgi?id=88955
Bug ID: 88955
Summary: Validate the number of received info structs in
introspect.c
Product: PulseAudio
Version: unspecified
Hardware: Other
OS: All
Status: NEW
Keywords: love
Severity: normal
Priority: medium
Component: clients
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
introspect.c doesn't check how many info structs it gets in response, when the
info for exactly one object is requested. This means that if applications want
to be robust against broken/malicious servers, they have to count the info
structs themselves, which is not trivial. This input validation should be done
by libpulse, so that applications can assume that when requesting the info of
one object, exactly one info is returned (or an error).
--
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
_______________________________________________
pulseaudio-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/pulseaudio-bugs
