[Prelude Hybrid IDS] #197: Crash in prelude_connection_permission_new_from_string() with permission="idmef"

#197: Crash in prelude_connection_permission_new_from_string() with
permission="idmef"
-----------------------------------+----------------------------------------
 Reporter:  [email protected]  |       Owner:  yoann
     Type:  defect                 |      Status:  new  
 Priority:  low                    |   Milestone:       
Component:  libprelude             |     Version:  0.9  
 Severity:  critical               |    Keywords:       
-----------------------------------+----------------------------------------
 The crash in is libprelude, file prelude-connection.c, line 891:
 {{{
         tmp = buf;
         while ( (tptr = strsep(&tmp, ":")) ) {

                 while ( *tptr == ' ' ) tptr++;
                 if ( ! *tptr )
                         continue;

                 for ( i = 0; tbl[i].name; i++ ) {
                         if ( strcmp(tbl[i].name, tptr) != 0 )
                                 continue;

                         break;
                 }

                 if ( ! tbl[i].name )
                         return
 prelude_error_verbose(PRELUDE_ERROR_UNKNOWN_PERMISSION_TYPE, "unknown
 permission type '%s'", tptr);

                 while ( *tmp == ' ' )     @@@ HERE @@@
                         tmp++;
 (...)
 }}}
 If buffer doesn't contains separator (':'), strsep() set tmp to NULL, and
 so *tmp crash.

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/197>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel