RE: Serious bug in wml_compiler.c

"Paul Keogh" <[email protected]>
Newsgroups gmane.comp.mobile.kannel.devel
Message-ID <[email protected]>
> Hi, list.
> There is bug in wml_compiler.c that forces wapbox panic
> in some circumstances.
> Problem is in string table.
> string_table_add() returns unsigned long offset for new entry and
> after that wml_compiler uses output_st_char()->octstr_append_char() to
> add this offset to binary wml. It adds only u_int8, but offset
> is mb_u_int32, so on large string tables octstr_append_char() PANIC on
> Assertion `ch <= UCHAR_MAX'.
> 
> I attach wml file on which kannel panics and patch to 
> eliminate this problem.
> 
> P.S.
> Attached index.wml can be tested with test/wml_tester also.
> 

+1 for this.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.