pidgin.2.5.5.veracode: 5de39b14: Prevent a NUL ptr deref caused by a malf...

datallah at pidgin.im datallah at pidgin.im
Thu May 14 17:36:33 EDT 2009


-----------------------------------------------------------------
Revision: 5de39b1419de0a9a28ed05337206a356500c5581
Ancestor: 923515782d44c610768493eed9ddf3664c195b21
Author: datallah at pidgin.im
Date: 2009-05-02T19:39:45
Branch: im.pidgin.pidgin.2.5.5.veracode
URL: http://d.pidgin.im/viewmtn/revision/info/5de39b1419de0a9a28ed05337206a356500c5581

Modified files:
        libpurple/protocols/msn/httpconn.c

ChangeLog: 

Prevent a NUL ptr deref caused by a malformed session_id.
This came out of the veracode analysis.

-------------- next part --------------
============================================================
--- libpurple/protocols/msn/httpconn.c	95775bac8ce400e3d4c8befd69789162ba9580ae
+++ libpurple/protocols/msn/httpconn.c	3d00fc165bbdee5697b5aa212f9353d9a913d37a
@@ -219,7 +219,13 @@ msn_httpconn_parse_data(MsnHttpConn *htt
 		g_free(tmp);
 
 		t = strchr(full_session_id, '.');
-		session_id = g_strndup(full_session_id, t - full_session_id);
+		if (t != NULL)
+			session_id = g_strndup(full_session_id, t - full_session_id);
+		else {
+			purple_debug_error("msn", "Malformed full_session_id[%s]\n",
+					   full_session_id ? full_session_id : NULL);
+			session_id = g_strdup(full_session_id);
+		}
 
 		if (session_action == NULL || strcmp(session_action, "close") != 0)
 		{


More information about the Commits mailing list