[sr-dev] [kamailio] kamailio crash when use http_query (#468)

situnan notifications at github.com
Thu Jan 7 09:09:19 CET 2016


1file:modules/utils/functionsc
2Problem Description:Array Overflow  and  View Code Label:wsong at grandstreamcn 



size_t write_function( void *ptr, size_t size, size_t nmemb, void *stream_ptr)
{
	http_res_stream_t *stream = (http_res_stream_t *) stream_ptr;

	stream->buf = (char *) pkg_realloc(stream->buf, stream->curr_size + 
			(size * nmemb) + 1);

	if (stream->buf == NULL) {
		LM_ERR("cannot allocate memory for stream\n");
		return CURLE_WRITE_ERROR;
	}

	memcpy(&stream->buf[stream->pos], (char *) ptr, (size * nmemb));

	stream->curr_size += ((size * nmemb) + 1);
	stream->pos += (size * nmemb);

//begin modify wsong at grandstreamcn 
// reason:stream->buf size begin with 0 
//	stream->buf[stream->pos + 1] = '\0';
stream->buf[stream->pos ] = '\0';
//end modify wsong at grandstreamcn


	return size * nmemb;
}


---
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/468
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20160107/63d85b1e/attachment.html>


More information about the sr-dev mailing list