| Summary: | ASTERISK-07315: transmit_refer function uses uninitialized memory | ||
| Reporter: | garyhai (garyhai) | Labels: | |
| Date Opened: | 2006-08-17 13:36:26 | Date Closed: | 2006-08-17 14:14:38 |
| Priority: | Major | Regression? | No |
| Status: | Closed/Complete | Components: | Channels/chan_sip/Transfers |
| Versions: | Frequency of Occurrence | ||
| Related Issues: | |||
| Environment: | Attachments: | ||
| Description: | In trunk of chan_sip.c, there is a bug in function named transmit_refer. The line below touch an uninitialized memory. add_header(&req, "Max-Forwards", DEFAULT_MAX_FORWARDS); Maybe it may place after reqprep function for initialization. This bug may cause transfering failure with warning "Out of space, can't add anymore (%s:%s)\n". And it may cause buffer overflow. | ||
| Comments: | By: Russell Bryant (russell) 2006-08-17 14:14:38 fixed in the trunk in revision 40278, thanks! | ||