[asterisk-dev] [Code Review] Fix r374905 misuse of strdupa
wdoekes
reviewboard at asterisk.org
Sat Oct 13 01:43:23 CDT 2012
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviewboard.asterisk.org/r/2162/
-----------------------------------------------------------
(Updated Oct. 13, 2012, 1:43 a.m.)
Review request for Asterisk Developers and Mark Michelson.
Changes
-------
Incorporated Richard's feedback.
Summary
-------
I was a bit quick on the ship-it there ;)
Those strdupa's are far from safe from direct user input.
Here's a fix, which happens to slightly faster too.
Diffs (updated)
-----
/branches/1.8/channels/chan_sip.c 374930
Diff: https://reviewboard.asterisk.org/r/2162/diff
Testing
-------
Got asterisk to crash easily before patch. No crash after. Mark's test from r2123 still completes with 0 errors.
Thanks,
wdoekes
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20121013/14df6c39/attachment.htm>
More information about the asterisk-dev
mailing list