[mythtv-commits] Ticket #11844: Negative values in Services API requests can cause segfaults

[MythTV]

#11844: Negative values in Services API requests can cause segfaults
-------------------------------------------------+-------------------------
     Reporter:  Bill Meek <keemllib@…>           |      Owner:
         Type:  Bug Report - Crash               |     Status:  new
     Priority:  minor                            |  Milestone:  unknown
    Component:  MythTV - Services API - Backend  |    Version:  Master Head
     Severity:  medium                           |   Keywords:
Ticket locked:  0                                |
-------------------------------------------------+-------------------------
 To Duplicate
 {{{
 Start the backend with -v upnp (just for detail)
 From a browser send:
     <hostname>:6544/Dvr/GetRecordScheduleList?StartIndex=-1
 }}}

 Backtrace/version and backend log attached.

 Obvious workaround, don't send negative values.

 I'd be glad to add a patch that takes the absolute value
 of nStartIndex and nCount, or range checkes their values.

 But that only solves this case. Suggest that no input
 should crash the BE.

--
Ticket URL: <http://code.mythtv.org/trac/ticket/11844>
MythTV <http://www.mythtv.org>
MythTV Media Center