| Summary: | krfb: Double free in xupdatescanner.cc | ||
|---|---|---|---|
| Product: | TDE | Reporter: | Ignaz Forster <ignaz.forster> |
| Component: | tdenetwork | Assignee: | Timothy Pearson <kb9vqf> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | bugwatch, darrella, nick |
| Priority: | P5 | ||
| Version: | 3.5.12 [Trinity] | ||
| Hardware: | i386 | ||
| OS: | Debian Lenny | ||
| See Also: | http://bugs.debian.org/518511 | ||
| Compiler Version: | TDE Version String: | ||
| Application Version: | Application Name: | ||
| Attachments: | Fix SIGABRT when closing connection | ||
|
Description
Ignaz Forster
2011-01-26 04:42:10 CST
Created attachment 53 [details]
Fix SIGABRT when closing connection
Confirming this problem is still in Trinity. It means one cannot reconnect to a desktop via RDC protocol after disconnecting, because krdc will have crashed. Just attempting to connect and then cancelling without entering the password will cause the crash, which means that non-authorised connectors can DOS you (as well as making it regrettably easy to DOS yourself). I can confirm the OP's patch fixes it as I've been running a patched 3.5.10 for a while. Can it be applied before 3.5.13, please ? Fixed in SVN revision 1260223. Thanks for reporting, and to Ignaz for posting the patch! |