29 - Memory access error in asl_field_list

Reported by pieterhpieterh (1224487386|%O ago)

John Obaterspok <moc.liamg|kopsretabo.nhoj#moc.liamg|kopsretabo.nhoj> reports:

I just tried OpenAMQ-1.2d5 on Linux Fedora 9/i386. Started amq_server & amq_client. Then noticed that server aborted.

diff -u OpenAMQ-1.2d5/base-2.2b1/asl/asl_field_list.c OpenAMQ-1.2d5_pw/base-2.2b1/asl/asl_field_list.c
--- OpenAMQ-1.2d5/base-2.2b1/asl/asl_field_list.c    2008-10-03 17:20:23.000000000 +0200
+++ OpenAMQ-1.2d5_pw/base-2.2b1/asl/asl_field_list.c    2008-10-19 22:26:36.000000000 +0200
@@ -1024,7 +1024,7 @@
     field = self_next (&field);
     icl_mem_strfree (&append);
 }
-string->data [ICL_SHORTSTR_MAX] = 0;
+string->data [ICL_SHORTSTR_MAX - 1] = 0;
 icl_shortstr_cpy (dest, (char *) string->data);
 icl_longstr_destroy (&string);
 }

Attachments:

No files attached to this page.

Manage attachments

Comments

Add a New Comment

Edit | Files | Tags | Print

rating: +1+x

Who's following this issue?

pieterhpieterh
martin_sustrikmartin_sustrik
CybariteCybarite
Watch: site | category | page

Submitted by pieterhpieterh

Use one of these tags to say what kind of issue it is:

  • issue - a fault in the software or the packaging or the documentation.
  • change - a change or feature request.

Use one of these tags to say what state the issue is in:

  • open - a new, open issue.
  • closed - issue has been closed.
  • rejected - the issue has been rejected.

Use one of these tags to say how urgent the issue is:

  • fatal - the issue is stopping all work.
  • urgent - it's urgent.

All open

87 - Zyre returns incomplete XML (26 Apr 2010 08:15) [open]
86 - SFL 'random(num)' macro is wrong in sfl.h (31 Mar 2010 09:23) [open]
85 - Zyre does not start on Solaris (23 Mar 2010 01:29) [open]
84 - OpenAMQ JMS - AMQTopic constructor use HEADER name and class instead of TOPIC (28 Jan 2010 17:04) [open]
83 - WireAPI: How to 'override' signal handlers? (14 Jan 2010 17:33) [open]
82 - Opf Classes Cannot Accept Default Values With Characte (06 Jan 2010 09:34) [open]
81 - AMQP Topic Exhange Routing (29 Dec 2009 00:21) [open]
80 - OpenAMQ reports malformed frame on 0-9-1 queue.unbind (20 Nov 2009 12:33) [open]
79 - AMQ Server crashing if subscribe topic is set as #.# (30 Oct 2009 06:11) [open]
78 - Error while publishing the messages faster (30 Oct 2009 05:57) [open]
77 - Tuning for latency (28 Oct 2009 16:47) [open]
76 - New user forum (28 Oct 2009 11:29) [change open]
74 - Simulaneous connect/disconnect from multiple threads crashes (03 Sep 2009 15:32) [open]
73 - Topic Exchange not sending a message to XXX.* (25 Aug 2009 21:10) [open]
72 - amq_content_basic_new() causes seg fault if not connected to broker (12 Aug 2009 23:50) [open]
71 - zyre bugs (06 Aug 2009 09:33) [open]
69 - OpenAMQ and Zyre (15 Jul 2009 11:27) [open]
68 - Change names of max and min source code macros (10 Jul 2009 16:52) [open]
67 - Server crash when multiple consumers ack on shared queue (26 Jun 2009 11:35) [open]
63 - Broker Crashing (14 May 2009 20:17) [open]

page 1 of 212next »

Most recent

88 - amq_console_agent crashes (28 Aug 2010 08:46) [closed]
87 - Zyre returns incomplete XML (26 Apr 2010 08:15) [open]
86 - SFL 'random(num)' macro is wrong in sfl.h (31 Mar 2010 09:23) [open]
85 - Zyre does not start on Solaris (23 Mar 2010 01:29) [open]
84 - OpenAMQ JMS - AMQTopic constructor use HEADER name and class instead of TOPIC (28 Jan 2010 17:04) [open]
83 - WireAPI: How to 'override' signal handlers? (14 Jan 2010 17:33) [open]
82 - Opf Classes Cannot Accept Default Values With Characte (06 Jan 2010 09:34) [open]
81 - AMQP Topic Exhange Routing (29 Dec 2009 00:21) [open]
80 - OpenAMQ reports malformed frame on 0-9-1 queue.unbind (20 Nov 2009 12:33) [open]
79 - AMQ Server crashing if subscribe topic is set as #.# (30 Oct 2009 06:11) [open]

Page tags: closed