Opened 17 years ago

Closed 17 years ago

#7150 closed defect (fixed)

memset might continue past end of struct

Reported by: Erik Hovland <erik@…> Owned by: Janne Grunau
Priority: trivial Milestone: 0.22
Component: MythTV - General Version: head
Severity: low Keywords:
Cc: Ticket locked: no

Description

The number of bytes that memset might zero out is based on a different struct then the one being zeroed. So the patch switches to the struct that is being zeroed for the sizeof() call.

Attachments (1)

libs_libmythtv-suppress-overruns​ (810 bytes ) - added by Erik Hovland <erik@…> 17 years ago.
Use tmphead for sizeof() in memset

Download all attachments as: .zip

Change History (3)

by Erik Hovland <erik@…>, 17 years ago

Attachment: libs_libmythtv-suppress-overruns​ added

Use tmphead for sizeof() in memset

comment:1 by Janne Grunau, 17 years ago

Milestone: unknown → 0.22
Owner: changed from Isaac Richards to Janne Grunau
Status: new → accepted

comment:2 by Janne Grunau, 17 years ago

Resolution: → fixed
Status: accepted → closed

(In [22052]) fixes memcpy in nuppeldecoder against over reads/writes. Closes #7150

Refs ##2479. Also fixes useless checks in constant rtfileheader introduced in [11314].

Note: See TracTickets for help on using tickets.