[mythtv-commits] Ticket #5859: Fix for high level CA_PMT handler code (SIGSEGV due to buffer overflow)

[MythTV]

#5859: Fix for high level CA_PMT handler code (SIGSEGV due to buffer overflow)
--------------------------------------+-------------------------------------
 Reporter:  manuel.kampert at online.de  |        Owner:  danielk
     Type:  defect                    |       Status:  closed 
 Priority:  minor                     |    Milestone:  0.22   
Component:  mythtv                    |      Version:  head   
 Severity:  medium                    |   Resolution:  fixed  
  Mlocked:  0                         |  
--------------------------------------+-------------------------------------

Comment(by dekarl at web.de):

 this fix still leaves a 4 byte window open for buffer overruns
 (&msg.msg[4]...)
 better make it:

 if (CaPmt.length > ( sizeof(msg.msg) - 4 ))

 instead of:

 if (CaPmt.length > 256)

-- 
Ticket URL: <http://svn.mythtv.org/trac/ticket/5859#comment:6>
MythTV <http://www.mythtv.org/>
MythTV