projects / platform / core / connectivity / net-config.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 11df819) | patch
Fix stack OOB Write Vulnerability in vpn_service_init 26/317826/1
authorJaehyun Kim <jeik01.kim@samsung.com>
Wed, 8 Jan 2025 08:51:48 +0000 (17:51 +0900)
committerJaehyun Kim <jeik01.kim@samsung.com>
Wed, 8 Jan 2025 08:51:48 +0000 (17:51 +0900)
commit4d966a3779f99aec39f5cb645351939717e34499
tree5275139908a8023f27265b222058eb7ea561c415tree | snapshot
parent11df8196250ec2a195bede2a6f7fea3a7f1a1cfacommit | diff
Fix stack OOB Write Vulnerability in vpn_service_init

An Out of Bounds Write vulnerability was discovered and fixed
in the vpn_service_init function of net-config,
which could be used to access the stack array without validation
by using a user-provided index,
thereby setting a value(0x00) in an out-of-bounds location.

Change-Id: I6140d21a7601efe4dad96b63a35385399993fd49
Signed-off-by: Jaehyun Kim <jeik01.kim@samsung.com>
src/vpnsvc-internal.c diff | blob | history
Domain: Network & Connectivity / Data Network;