# HG changeset patch # User John Bailey # Date 1250465244 0 # Node ID 4200554dd0fce30beb3df0bd8cc6301897a0bb0a # Parent 8ae961da80d558e56135a508fa658ca63302c810 Patch written by Mark Doliner and Paul Aurich to fix a remote crash on MSN reported to us by the CORE Security Technologies Security Advisories Team. diff -r 8ae961da80d5 -r 4200554dd0fc libpurple/protocols/msn/slplink.c --- a/libpurple/protocols/msn/slplink.c Sun Aug 16 23:25:51 2009 +0000 +++ b/libpurple/protocols/msn/slplink.c Sun Aug 16 23:27:24 2009 +0000 @@ -441,6 +441,7 @@ slpmsg->info = "SLP ACK"; msn_slplink_send_slpmsg(slplink, slpmsg); + msn_slpmsg_destroy(slpmsg); } static void @@ -578,7 +579,7 @@ /* fseek(slpmsg->fp, offset, SEEK_SET); */ len = fwrite(data, 1, len, slpmsg->fp); } - else if (slpmsg->size) + else if (slpmsg->size && slpmsg->buffer) { if (G_MAXSIZE - len < offset || (offset + len) > slpmsg->size) {