diff libpurple/protocols/msn/slplink.c @ 28287:4200554dd0fc

Patch written by Mark Doliner and Paul Aurich to fix a remote crash on MSN reported to us by the CORE Security Technologies Security Advisories Team.
author John Bailey <rekkanoryo@rekkanoryo.org>
date Sun, 16 Aug 2009 23:27:24 +0000
parents de7f6fd04298
children 6b66226f6e03
line wrap: on
line diff
--- a/libpurple/protocols/msn/slplink.c	Sun Aug 16 23:25:51 2009 +0000
+++ b/libpurple/protocols/msn/slplink.c	Sun Aug 16 23:27:24 2009 +0000
@@ -441,6 +441,7 @@
 	slpmsg->info = "SLP ACK";
 
 	msn_slplink_send_slpmsg(slplink, slpmsg);
+	msn_slpmsg_destroy(slpmsg);
 }
 
 static void
@@ -578,7 +579,7 @@
 		/* fseek(slpmsg->fp, offset, SEEK_SET); */
 		len = fwrite(data, 1, len, slpmsg->fp);
 	}
-	else if (slpmsg->size)
+	else if (slpmsg->size && slpmsg->buffer)
 	{
 		if (G_MAXSIZE - len < offset || (offset + len) > slpmsg->size)
 		{