Opened 10 years ago

Closed 10 years ago

#7150 closed defect (fixed)

memset might continue past end of struct

Reported by: Erik Hovland <erik@…> Owned by: Janne Grunau
Priority: trivial Milestone: 0.22
Component: MythTV - General Version: head
Severity: low Keywords:
Cc: Ticket locked: no

Description

The number of bytes that memset might zero out is based on a different struct then the one being zeroed. So the patch switches to the struct that is being zeroed for the sizeof() call.

Attachments (1)

libs_libmythtv-suppress-overruns (810 bytes) - added by Erik Hovland <erik@…> 10 years ago.
Use tmphead for sizeof() in memset

Download all attachments as: .zip

Change History (3)

Changed 10 years ago by Erik Hovland <erik@…>

Use tmphead for sizeof() in memset

comment:1 Changed 10 years ago by Janne Grunau

Milestone: unknown0.22
Owner: changed from Isaac Richards to Janne Grunau
Status: newaccepted

comment:2 Changed 10 years ago by Janne Grunau

Resolution: fixed
Status: acceptedclosed

(In [22052]) fixes memcpy in nuppeldecoder against over reads/writes. Closes #7150

Refs ##2479. Also fixes useless checks in constant rtfileheader introduced in [11314].

Note: See TracTickets for help on using tickets.