Re: Bug in wap_push_ppg.c

Yeah. Thanks for the report.

Aarno

On 12.11.2003, at 11:50, Paul Keogh wrote:

>
> In the function
>
> static int transform_message(WAPEvent **e, WAPAddrTuple **tuple,
>                              List *push_headers, int cless_accepted, 
> Octstr **type)
>
> it is possible to invoke the
>
>     if (!content_transformable(push_headers))
>         goto no_transform;
>
> branch.
>
> If this happens, then
>
>     octstr_destroy(content.type);
>     octstr_destroy(content.charset);
>
> will be invoked on an uninitialised instance of content.
> The result will be unpredictable.
>
> Paul Keogh
> ANAM Wireless Internet Solutions
> http://www.anam.com
> +353 1 284 7555 (wired)               +353 86 234 6047 (wireless)
> Castle Yard, Saint Patrick's Road, Dalkey, County Dublin, Ireland
>
>