RE: -Possible- licq D.o.S

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello.

This crash occurred when a static buffer of 1024 bytes overflowed.  This is 
fixed in the latest version of licq in the CVS and should be in the next CVS 
daily snapshot.  The CVS copy of licq uses the new v8 protocol (otherwise 
known as OSCAR) while the latest release does not.  If for some reason you do 
not want to use the CVS copy, use the attached patch, and when prompted for 
file to patch enter the full path to icqd-chat.cpp (i.e. 
/home/user/licq/src/icqd-chat.cpp)

It would be appreciated if the bug reporter would also contact licq-devel to 
let the developers of licq be aware of this problem and any future problems.

Jon
1247a1248,1253
>           if (strlen(u->linebuf) > 1000) // stop a little early
>           {
>              u->linebuf[1000] = '\0';
>              PushChatEvent(new CChatEvent(CHAT_NEWLINE, u, u->linebuf));
>              u->linebuf[0] = '\0';
>           }
1547a1548,1553
> 	    if (strlen(u->linebuf) > 1000) // stop a little early
> 	    {
> 		u->linebuf[1000] = '\0';
>                 PushChatEvent(new CChatEvent(CHAT_NEWLINE, u, u->linebuf));
> 		u->linebuf[0] = '\0';
> 	    } 

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux