[pulseaudio-tickets] [Bug 88955] New: Validate the number of received info structs in introspect.c

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=88955

            Bug ID: 88955
           Summary: Validate the number of received info structs in
                    introspect.c
           Product: PulseAudio
           Version: unspecified
          Hardware: Other
                OS: All
            Status: NEW
          Keywords: love
          Severity: normal
          Priority: medium
         Component: clients
          Assignee: pulseaudio-bugs at lists.freedesktop.org
          Reporter: tanuk at iki.fi
        QA Contact: pulseaudio-bugs at lists.freedesktop.org
                CC: lennart at poettering.net

introspect.c doesn't check how many info structs it gets in response, when the
info for exactly one object is requested. This means that if applications want
to be robust against broken/malicious servers, they have to count the info
structs themselves, which is not trivial. This input validation should be done
by libpulse, so that applications can assume that when requesting the info of
one object, exactly one info is returned (or an error).

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/pulseaudio-bugs/attachments/20150203/92fe83b6/attachment.html>