Merge pull request #3065 from Ellipsis753/patch-1

rvlad-patrascu · web-flow · commit cdb5d49865d6 · 2023-04-26T22:01:27.000+03:00
Fix buffer overflow in b2b_logic
diff --git a/modules/b2b_logic/logic.c b/modules/b2b_logic/logic.c
@@ -2684,7 +2684,7 @@ str *b2b_scenario_hdrs(struct b2bl_new_entity *entity)
 				continue;
 			}
 			b2b_hdrs_buf.s = tmp_buf;
-			b2b_hdrs_buf_len += len;
+			b2b_hdrs_buf_len = b2b_hdrs_buf.len + len;
 		}
 		memcpy(b2b_hdrs_buf.s + b2b_hdrs_buf.len, name_value.s.s, name_value.s.len);
 		b2b_hdrs_buf.len += name_value.s.len;

Original file line number	Diff line number	Diff line change
`@@ -2684,7 +2684,7 @@ str b2b_scenario_hdrs(struct b2bl_new_entity entity)`
`2684`	`2684`	`continue;`
`2685`	`2685`	`}`
`2686`	`2686`	`b2b_hdrs_buf.s = tmp_buf;`
`2687`		`- b2b_hdrs_buf_len += len;`
	`2687`	`+ b2b_hdrs_buf_len = b2b_hdrs_buf.len + len;`
`2688`	`2688`	`}`
`2689`	`2689`	`memcpy(b2b_hdrs_buf.s + b2b_hdrs_buf.len, name_value.s.s, name_value.s.len);`
`2690`	`2690`	`b2b_hdrs_buf.len += name_value.s.len;`