[asterisk-bugs] [Asterisk 0015046]: [patch] Data truncated in ooh323_request because of sizeof incorrect usage

Asterisk Bug Tracker noreply at bugs.digium.com
Sun Sep 6 01:25:10 CDT 2009


A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15046 
====================================================================== 
Reported By:                IgorG
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15046
Category:                   Addons/chan_ooh323
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     feedback
Asterisk Version:           SVN 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases):  trunk 
SVN Revision (number only!): 902 
Request Review:              
====================================================================== 
Date Submitted:             2009-05-06 23:35 CDT
Last Modified:              2009-09-06 01:25 CDT
====================================================================== 
Summary:                    [patch] Data truncated in ooh323_request because of
sizeof incorrect usage
Description: 
On form user reported that destination passed via Dial to OOH323 channel.
Issue caused by improper sizeof usage: data passed to ooh323_request is
void* and not an static array.
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
related to          0015285 [patch] reworked chan_ooh323
====================================================================== 

---------------------------------------------------------------------- 
 (0110250) IgorG (reporter) - 2009-09-06 01:25
 https://issues.asterisk.org/view.php?id=15046#c110250 
---------------------------------------------------------------------- 
Seems no changes from May. Problem here in using ast_copy_string with array
length calculated as sizeof(data). data in this function is void*, when in
others similar places sizeof taken from array with defined length. 

In this situation always one byte copied, ignoring other string symbols. I
have not know if it broken some functionality, but it is buggy string
length anyway. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-09-06 01:25 IgorG          Note Added: 0110250                          
======================================================================




More information about the asterisk-bugs mailing list