Re: Kannel crashes when dlrmask = 8 requested (EMI2 protocol) patch

Hello!

I look into the code and it's looks as not good idea.

emimsg = get_fields(str, privdata->name);

create emimsg with size where E50_AMSG point to beyond the bounds emimsg
structure (for 51 type of reply message, emimsg_create_reply_s(ot, trn, 1,
whoami) function in get_fields ) and set it to NULL can destroy other data.


with best wishes
 German Aksenov
phone: (095)258-7258 ext. 7836


                                                                                                                           
                      Andreas Fink                                                                                         
                      <[email protected]        To:       [email protected]                                                
                      >                        cc:                                                                         
                                               Subject:  Re: Kannel crashes when dlrmask = 8 requested (EMI2 protocol)     
                      13.11.2002 17:49          patch                                                                      
                                                                                                                           
                                                                                                                           





On Mittwoch, November 13, 2002, at 03:38  Uhr, [email protected] wrote:

>
> Hello!
>
> that about patch?
> how avoid condition then used variable which not was initialized?


well initialize it with NULL