The ber_write_length() function can store variable number of bytes (one or
authorPawel Jakub Dawidek <pawel@dawidek.net>
Tue, 17 Jan 2012 09:45:10 +0000 (10:45 +0100)
committerPawel Jakub Dawidek <pawel@dawidek.net>
Tue, 17 Jan 2012 13:17:04 +0000 (14:17 +0100)
commit1dd33b49d53b458d82e6d2ddf752ce3a433b60a8
tree96ec2aa9df6f0fd218ffd17f04f4b95ea437e743
parent41558e4bd6982d508914a4f7b8278615aef1ad9e
The ber_write_length() function can store variable number of bytes (one or
three). We can't tell until we write other data and know the length, so don't
assume how much space will by consumed to store length. Bug was observed with
the mcs_write_connect_response() function, where the function assumed that
application tag will take three bytes, but it was taking five.
libfreerdp-core/mcs.c