[asterisk-bugs] [Zaptel 0008155]: Insufficient memory allocated for read buffer

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=8155 
====================================================================== 
Reported By:                araasch
Assigned To:                russell
====================================================================== 
Project:                    Zaptel
Issue ID:                   8155
Category:                   wct4xxp
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     closed
Zaptel Version:             1.4.0-beta1 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        No 
Request Review:              
Resolution:                 fixed
Fixed in Version:           
====================================================================== 
Date Submitted:             10-16-2006 13:17 CDT
Last Modified:              06-07-2008 12:01 CDT
====================================================================== 
Summary:                    Insufficient memory allocated for read buffer
Description: 
Line 2640 in base.c reads:

unsigned char readbuf[FRMR_RBCL_MAX_SIZE];

Should be:

unsigned char readbuf[FRMR_RBCL_MAX_SIZE+1];


====================================================================== 

---------------------------------------------------------------------- 
 svnbot - 06-07-08 12:01  
---------------------------------------------------------------------- 
Repository: dahdi
Revision: 1508

_U  trunk/
U   trunk/wct4xxp/base.c

------------------------------------------------------------------------
r1508 | russell | 2008-06-07 12:01:45 -0500 (Sat, 07 Jun 2008) | 12 lines

Merged revisions 1507 via svnmerge from 
https://origsvn.digium.com/svn/zaptel/branches/1.4

........
r1507 | russell | 2006-10-17 12:40:45 -0400 (Tue, 17 Oct 2006) | 4 lines

Set the readbuf size to be the same size of the variable, readsize.  This
buffer
was 31 bytes, while the readsize could be 32 bytes, causing a read into
invalid
memory.  (issue http://bugs.digium.com/view.php?id=8155, araasch)

........

------------------------------------------------------------------------

http://svn.digium.com/view/dahdi?view=rev&revision=1508 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
06-07-08 12:01  svnbot         Checkin                                      
06-07-08 12:01  svnbot         Note Added: 0088174                          
======================================================================