NULL Pointer Dereference in commotion command-line client (Misc)

opentechinstitute / commotiond

The system management daemon for the Commotion Wireless Project.

https://commotionwireless.net

GNU Affero General Public License v3.0

26 stars 21 forks source link

NULL Pointer Dereference in commotion command-line client (Misc) #30

Closed areynold closed 10 years ago

areynold commented 11 years ago

encountered null pointer dereference in commotion command line client triggered by passing command names larger than 32 bytes (MSG_TARGET_SIZE defined in msg.h).

This vulnerability has limited impact as only client program crashes and commotiond server stays intact, ready to serve future clients.

Originally reported as WRT-01-009

jheretic commented 10 years ago

This issue is no longer relevant, as this part of the daemon has been completely rewritten.