RE: Serious bug in wml_compiler.c
"Paul Keogh" <[email protected]>
| Newsgroups | gmane.comp.mobile.kannel.devel |
|---|---|
| Message-ID | <[email protected]> |
> Hi, list. > There is bug in wml_compiler.c that forces wapbox panic > in some circumstances. > Problem is in string table. > string_table_add() returns unsigned long offset for new entry and > after that wml_compiler uses output_st_char()->octstr_append_char() to > add this offset to binary wml. It adds only u_int8, but offset > is mb_u_int32, so on large string tables octstr_append_char() PANIC on > Assertion `ch <= UCHAR_MAX'. > > I attach wml file on which kannel panics and patch to > eliminate this problem. > > P.S. > Attached index.wml can be tested with test/wml_tester also. > +1 for this.