kenmirrors/freeswitch
1
0
Fork 0
mirror of https://github.com/signalwire/freeswitch.git synced 2025-03-05 10:08:08 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request from signalwire/mod_rayo_heap

Browse Source 
[mod_rayo] Fix heap use after free and a possible buffer overflow.
This commit is contained in:
Andrey Volk 2020-01-20 13:42:30 +04:00 committed by GitHub
commit 3fb5df00fb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
src/mod/event_handlers/mod_rayo
mod_rayo.csrgs.c

2
src/mod/event_handlers/mod_rayo/mod_rayo.c

@ -4854,7 +4854,7 @@ static int alias_api(struct rayo_cmd_alias *alias, char *args, switch_stream_han
cmd = strdup(alias->cmd);
for (i = 1; i < argc; i++) {
char *cmd_new;
char to_replace[4] = { 0 };
char to_replace[12] = { 0 };
sprintf(to_replace, "$%i", i);
cmd_new = switch_string_replace(cmd, to_replace, argv[i]);
free(cmd);

2
src/mod/event_handlers/mod_rayo/srgs.c

@ -851,8 +851,8 @@ static void srgs_grammar_destroy(struct srgs_grammar *grammar)
if (grammar->jsgf_file_name) {
switch_file_remove(grammar->jsgf_file_name, pool);
}
switch_core_destroy_memory_pool(&pool);
switch_core_hash_destroy(&grammar->rules);
switch_core_destroy_memory_pool(&pool);
}
/**