[Pidgin] #8672: resolver can sigabort trying to allocate a large amount of memory

Pidgin trac at pidgin.im
Thu Jul 23 22:27:53 EDT 2009


#8672: resolver can sigabort trying to allocate a large amount of memory
----------------------+-----------------------------------------------------
 Reporter:  paul.m    |        Owner:  darkrain42
     Type:  defect    |       Status:  new       
Milestone:            |    Component:  libpurple 
  Version:  2.5.5     |   Resolution:            
 Keywords:  resolver  |  
----------------------+-----------------------------------------------------
Changes (by darkrain42):

  * owner:  => darkrain42


Comment:

 paul.m, am I understanding correctly that you think the issue here is
 that, in purple_dnsquery_resolver_run, the first write_to_parent (the
 return value of getaddrinfo) is 0, but then, while copying the full set of
 responses, a call to write_to_parent fails on the ai_addrlen, so the data
 that the parent process reads in expecting the *length* is actually part
 of the string (which, since it's a character string, is likely a large-ish
 amount, causing an abort).

 Is that correct?

-- 
Ticket URL: <http://developer.pidgin.im/ticket/8672#comment:2>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list