On Dec 17, 2013, at 11:24 46, Karl Koscher <[email protected]> wrote:

> I tracked the problem down to a benign buffer overflow in RLMHost's handling 
> of ISRC and ISCI codes which nevertheless triggers a _FORTIFY_SOURCE runtime 
> buffer overflow check. Basically the rlm_isrc and rlm_isci members of the 
> rlm_pad struct are exactly the size of ISRC and ISCI codes, with no room for 
> a null terminator. This causes sprintf to overflow these buffers when it 
> copies the codes over. The attached patch fixes this issue.

Applied and committed in CVS-v2_branch.  Thanks!

Cheers!


|-------------------------------------------------------------------------|
| Frederick F. Gleason, Jr. |               Chief Developer               |
|                           |               Paravel Systems               |
|-------------------------------------------------------------------------|
|          A room without books is like a body without a soul.            |
|                                         -- Cicero                       |
|-------------------------------------------------------------------------|

_______________________________________________
Rivendell-dev mailing list
[email protected]
http://caspian.paravelsystems.com/mailman/listinfo/rivendell-dev

Reply via email to