| 1234567891011121314151617181920 |
- diff -up openslp-2.0.0/slpd/slpd_process.c.orig openslp-2.0.0/slpd/slpd_process.c
- --- openslp-2.0.0/slpd/slpd_process.c.orig 2018-05-09 13:08:06.185104375 +0200
- +++ openslp-2.0.0/slpd/slpd_process.c 2018-05-09 13:07:21.017095089 +0200
- @@ -462,6 +462,15 @@ static int ProcessSrvRqst(SLPMessage * m
- message->body.srvrqst.srvtype, 23, SLP_DA_SERVICE_TYPE) == 0)
- {
- errorcode = ProcessDASrvRqst(message, sendbuf, errorcode);
- +
- + if (result != *sendbuf)
- + {
- + // The pointer stored at *sendbuf can be modified by a realloc
- + // operation in ProcessDASrvRqst(). Fix up the local copy of
- + // that pointer if necessary.
- + result = *sendbuf;
- + }
- +
- if (errorcode == 0)
- {
- /* Since we have an errorcode of 0, we were successful,
|
