[asterisk-bugs] [Asterisk 0015046]: [patch] Data truncated in ooh323_request because of sizeof incorrect usage
Asterisk Bug Tracker
noreply at bugs.digium.com
Sun Sep 6 01:25:10 CDT 2009
A NOTE has been added to this issue.
======================================================================
https://issues.asterisk.org/view.php?id=15046
======================================================================
Reported By: IgorG
Assigned To:
======================================================================
Project: Asterisk
Issue ID: 15046
Category: Addons/chan_ooh323
Reproducibility: always
Severity: minor
Priority: normal
Status: feedback
Asterisk Version: SVN
Regression: No
SVN Branch (only for SVN checkouts, not tarball releases): trunk
SVN Revision (number only!): 902
Request Review:
======================================================================
Date Submitted: 2009-05-06 23:35 CDT
Last Modified: 2009-09-06 01:25 CDT
======================================================================
Summary: [patch] Data truncated in ooh323_request because of
sizeof incorrect usage
Description:
On form user reported that destination passed via Dial to OOH323 channel.
Issue caused by improper sizeof usage: data passed to ooh323_request is
void* and not an static array.
======================================================================
Relationships ID Summary
----------------------------------------------------------------------
related to 0015285 [patch] reworked chan_ooh323
======================================================================
----------------------------------------------------------------------
(0110250) IgorG (reporter) - 2009-09-06 01:25
https://issues.asterisk.org/view.php?id=15046#c110250
----------------------------------------------------------------------
Seems no changes from May. Problem here in using ast_copy_string with array
length calculated as sizeof(data). data in this function is void*, when in
others similar places sizeof taken from array with defined length.
In this situation always one byte copied, ignoring other string symbols. I
have not know if it broken some functionality, but it is buggy string
length anyway.
Issue History
Date Modified Username Field Change
======================================================================
2009-09-06 01:25 IgorG Note Added: 0110250
======================================================================
More information about the asterisk-bugs
mailing list