NULL pointer in msn_oim_report_to_user

Ka-Hing Cheung khc at pidgin.im
Wed Dec 31 21:36:24 EST 2008


On Mon, Dec 29, 2008 at 05:46:10PM +0000, Luigi Auriemma wrote:
> Hey,
> 
> there is a problem in the msn_oim_report_to_user function of msn\oim.c
> at line 629:
> 
>         boundary = g_strdup_printf("--%s" MSG_OIM_LINE_DEM,
>             msn_message_get_attr(message, "boundary"));
> 
> if there is the "X-OIMProxy: MOSMS" header without the "boundary" one the
> client crashes due to a NULL pointer.
> 
> this happened when a user added my account to his list and I have not
> verified if this problem can be intentionally "abused" or not, in any
> case the MSN plugin of Piding is completely unusable because crashes at
> each start due to this problem.
> 

Thanks for reporting this, this has been reported and fixed already.

-khc




More information about the Support mailing list