[h323plus] bug in dyna.cxx

Alessandro Angeli packetizer.com at riseoftheants.com
Tue Jan 11 15:19:38 EST 2011


h323plus\plugins\video\common\dyna.cxx line 70: DynaLink::Open()

If %PTLIBPLUGINDIR% is not set and P_DEFAULT_PLUGIN_DIR is not defined,
ptlibPath is never initialized and can cause a buffer overrun and stack
corruption in InternalOpen().

Probably the #ifdef should include an #else where ptlibPath is 
initialized to "".

Are there any plans to update the code to use safe string routines?

-- 
Alessandro




More information about the h323plus mailing list