11 Jan
2011
11 Jan
'11
4:30 p.m.
Hi Alessandro,
the initialization is fixed in the CVS now. Thanks!
If you could provide a patch to switch to safe string routines that would be great. So far we don't have any other volunteers.
Regards, Jan
Alessandro Angeli wrote:
h323plus\plugins\video\common\dyna.cxx line 70: DynaLink::Open()
If %PTLIBPLUGINDIR% is not set and P_DEFAULT_PLUGIN_DIR is not defined, ptlibPath is never initialized and can cause a buffer overrun and stack corruption in InternalOpen().
Probably the #ifdef should include an #else where ptlibPath is initialized to "".
Are there any plans to update the code to use safe string routines?
-- Alessandro
--
Jan Willamowius, jan@willamowius.de, http://www.gnugk.org/