qpid-proton mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (PROTON-537) [proton-c] Pointer corruption in SSL buffer handling logic.
Date Mon, 17 Mar 2014 15:21:44 GMT

    [ https://issues.apache.org/jira/browse/PROTON-537?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13937910#comment-13937910

ASF subversion and git services commented on PROTON-537:

Commit 1578432 from [~kgiusti] in branch 'proton/trunk'
[ https://svn.apache.org/r1578432 ]

PROTON-537: fix dangling pointer in SSL layer.

> [proton-c] Pointer corruption in SSL buffer handling logic.
> -----------------------------------------------------------
>                 Key: PROTON-537
>                 URL: https://issues.apache.org/jira/browse/PROTON-537
>             Project: Qpid Proton
>          Issue Type: Bug
>            Reporter: Ken Giusti
>            Assignee: Ken Giusti
> Found by running Coverity Scan.
> If the application's input buffer is too small, the SSL layer will expand it as necessary.
 During the expansion the data tracking pointer is not reset to the new memory buffer, causing
a de-reference of an invalid pointer.

This message was sent by Atlassian JIRA

View raw message