alsa-project / alsa-lib

The Advanced Linux Sound Architecture (ALSA) - library
GNU Lesser General Public License v2.1
344 stars 173 forks source link

aserver: fix buffer overwriting #364

Closed szsam closed 7 months ago

szsam commented 7 months ago

name array should allocate space for the null terminator. Also, need to check if client->name has enough space for strcpy.

I suggest assigning a CVE for this buffer overflow vulnerability.

perexg commented 7 months ago

This server is usually not used in the standard environment. I don't think CVE is required.