[Pidgin] #6036: certificate.c segfault on NULL ptr dereference (patch attached)

Pidgin trac at pidgin.im
Fri Jun 6 20:05:30 EDT 2008


#6036: certificate.c segfault on NULL ptr dereference (patch attached)
-----------------------+----------------------------------------------------
 Reporter:  toofishes  |       Type:  defect
   Status:  new        |   Priority:  minor 
Component:  libpurple  |    Version:  2.4.2 
 Keywords:             |    Pending:  0     
-----------------------+----------------------------------------------------
 A "TODO: Unsafe?" comment proved to be quite true, and it bit me when
 attempting to patch the default certificate path used by libpurple (which
 on a side note seems odd to hardcode to something pidgin provides with no
 option to set a system path, but that is for a different report).

 Anyway, the patch is attached, should be pretty self-explanatory.
 Apparantly one of our system certs did not have a dn element so it died
 when attempting to look it up and strcmp() it.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/6036>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list