Re: Serious bug in wml_compiler.c

Stipe Tolj <[email protected]>
Newsgroups gmane.comp.mobile.kannel.devel
Organization Wapme Systems AG
Message-ID <[email protected]>
Vjacheslav Chekushin wrote:
> 
> Hi, list.
> There is bug in wml_compiler.c that forces wapbox panic
> in some circumstances.
> Problem is in string table.
> string_table_add() returns unsigned long offset for new entry and
> after that wml_compiler uses output_st_char()->octstr_append_char() to
> add this offset to binary wml. It adds only u_int8, but offset
> is mb_u_int32, so on large string tables octstr_append_char() PANIC on
> Assertion `ch <= UCHAR_MAX'.
> 
> I attach wml file on which kannel panics and patch to eliminate this problem.
> 
> P.S.
> Attached index.wml can be tested with test/wml_tester also.

thanks Vjacheslav. Can someone please confirm and vote. Aarno?!

Stipe

[email protected]
-------------------------------------------------------------------
Wapme Systems AG

Vogelsanger Weg 80
40470 Düsseldorf

Tel: +49-211-74845-0
Fax: +49-211-74845-299

E-Mail: [email protected]
Internet: http://www.wapme-systems.de
-------------------------------------------------------------------
wapme.net - wherever you are
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.