Displaying 2 results from an estimated 2 matches for "iax_frame_wrap".
2007 Jul 17
0
ASA-2007-014: Stack buffer overflow in IAX2 channel driver
...immediately, it uses a stack |
| | allocated iax_frame, with a data buffer size of 4096 |
| | bytes. |
| | |
| | Later, the iax_frame_wrap() function is used to copy the |
| | data from the ast_frame struct into the iax_frame |
| | struct. This function assumes the iax_frame data buffer |
| | has enough space for all of the data in the ast_frame. |
+----------------------------...
2007 Jul 17
0
ASA-2007-014: Stack buffer overflow in IAX2 channel driver
...immediately, it uses a stack |
| | allocated iax_frame, with a data buffer size of 4096 |
| | bytes. |
| | |
| | Later, the iax_frame_wrap() function is used to copy the |
| | data from the ast_frame struct into the iax_frame |
| | struct. This function assumes the iax_frame data buffer |
| | has enough space for all of the data in the ast_frame. |
+----------------------------...