[asterisk-dev] [Code Review] Fix r374905 misuse of strdupa

wdoekes reviewboard at asterisk.org
Fri Oct 12 15:28:18 CDT 2012


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviewboard.asterisk.org/r/2162/
-----------------------------------------------------------

Review request for Asterisk Developers and Mark Michelson.


Summary
-------

I was a bit quick on the ship-it there ;)
Those strdupa's are far from safe from direct user input.

Here's a fix, which happens to slightly faster too.


Diffs
-----

  /branches/1.8/channels/chan_sip.c 374930 

Diff: https://reviewboard.asterisk.org/r/2162/diff


Testing
-------

Got asterisk to crash easily before patch. No crash after. Mark's test from r2123 still completes with 0 errors.


Thanks,

wdoekes

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20121012/f94abbac/attachment-0001.htm>


More information about the asterisk-dev mailing list