diff options
| author | mmichelson <mmichelson@f38db490-d61c-443f-a65b-d21fe96a405b> | 2008-04-08 19:07:38 +0000 |
|---|---|---|
| committer | mmichelson <mmichelson@f38db490-d61c-443f-a65b-d21fe96a405b> | 2008-04-08 19:07:38 +0000 |
| commit | af06198aaa57902dfe4e7b477b7a5a5e44114ba7 (patch) | |
| tree | a2a78fc0f05d5fc04edfdeaffbb8d6378ebe5065 /apps | |
| parent | bd494a955662a5e4596b394b92f7e351f9f642bb (diff) | |
Fix potential buffer overflow that could happen if more than 100 announce files
were specified when calling ParkAndAnnounce. This overflow is not exploitable remotely
and so there is no need for a security advisory.
(closes issue #12386)
Reported by: davidw
git-svn-id: http://svn.digium.com/svn/asterisk/branches/1.4@113507 f38db490-d61c-443f-a65b-d21fe96a405b
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/app_parkandannounce.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/app_parkandannounce.c b/apps/app_parkandannounce.c index b4e9006fb..0e89c73ac 100644 --- a/apps/app_parkandannounce.c +++ b/apps/app_parkandannounce.c @@ -211,7 +211,7 @@ static int parkandannounce_exec(struct ast_channel *chan, void *data) tpl_working = template; tpl_current=strsep(&tpl_working, ":"); - while(tpl_current && looptemp < sizeof(tmp)) { + while(tpl_current && looptemp < ARRAY_LEN(tmp)) { tmp[looptemp]=tpl_current; looptemp++; tpl_current=strsep(&tpl_working,":"); |