[Pidgin] #5545: Possible NULL reference in msn_command_from_string()

Pidgin trac at pidgin.im
Wed Apr 16 18:52:43 EDT 2008


#5545: Possible NULL reference in msn_command_from_string()
-------------------------+--------------------------------------------------
Reporter:  sipphonematt  |       Owner:  khc                                   
    Type:  patch         |      Status:  new                                   
Priority:  minor         |   Component:  MSN                                   
 Version:  2.4.1         |    Keywords:  msn_command_from_string NULL command.c
 Pending:  0             |  
-------------------------+--------------------------------------------------
 The two msn_command_from_string() functions can cause a NULL dereference
 if the string consists of a command, and space, and nothing else. (e.g.
 "OUT ")

 If there is a space following the command, the function tries to parse the
 first parameter. If there is no first parameter, it passes NULL to
 is_num(), causing a SEGV.

 Attached are two patches (one for
 pidgin-2.4.1/libpurple/protocols/msn/command.c and one for
 pidgin-2.4.1/libpurple/protocols/msnp9/command.c )

-- 
Ticket URL: <http://developer.pidgin.im/ticket/5545>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list