summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMike Blumenkrantz <michael.blumenkrantz@gmail.com>2012-12-13 14:44:11 +0000
committerMike Blumenkrantz <michael.blumenkrantz@gmail.com>2012-12-13 14:44:11 +0000
commit3d1a3515fd0d945d8bbd07714ebae0b181af1be4 (patch)
tree6ba58f2e754b7edefbaa9846ae8e937241ef9773
parent19d25b150f0e9c1a09cba4fd4d02a11fc7deca36 (diff)
buffer overflow in pulse
SVN revision: 80870
-rw-r--r--msg.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/msg.c b/msg.c
index adb6952..ec35fc9 100644
--- a/msg.c
+++ b/msg.c
@@ -154,7 +154,7 @@ msg_send_creds(Pulse *conn, Pulse_Tag *tag)
154 int r; 154 int r;
155 155
156 INF("trying to send 20 byte auth header"); 156 INF("trying to send 20 byte auth header");
157 r = send(ecore_main_fd_handler_fd_get(conn->fdh), &tag->header[tag->pos], sizeof(tag->header) - tag->pos, MSG_NOSIGNAL); 157 r = send(ecore_main_fd_handler_fd_get(conn->fdh), &tag->header[tag->pos], PA_PSTREAM_DESCRIPTOR_MAX - tag->pos, MSG_NOSIGNAL);
158 INF("%i bytes sent!", r); 158 INF("%i bytes sent!", r);
159 if ((!r) || (r == (int)sizeof(tag->header))) tag->auth = EINA_TRUE; 159 if ((!r) || (r == (int)sizeof(tag->header))) tag->auth = EINA_TRUE;
160 else if (r < 0) 160 else if (r < 0)