projects / platform / core / connectivity / net-config.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b3cf7e8) | patch
Fix stack OOB Write Vulnerability in vpn_service_init 29/317829/1
authorJaehyun Kim <jeik01.kim@samsung.com>
Wed, 8 Jan 2025 08:51:48 +0000 (17:51 +0900)
committerJaehyun Kim <jeik01.kim@samsung.com>
Wed, 8 Jan 2025 08:54:16 +0000 (17:54 +0900)
commitd09f07ac7153080a33d0987d07b56b4ce29ed596
tree5c6386bb3872ec396d33b07441b18edc826f4804tree | snapshot
parentb3cf7e8c69381b09764c248b0c307dd2b3798b22commit | diff
Fix stack OOB Write Vulnerability in vpn_service_init

An Out of Bounds Write vulnerability was discovered and fixed
in the vpn_service_init function of net-config,
which could be used to access the stack array without validation
by using a user-provided index,
thereby setting a value(0x00) in an out-of-bounds location.

Change-Id: I6140d21a7601efe4dad96b63a35385399993fd49
Signed-off-by: Jaehyun Kim <jeik01.kim@samsung.com>
src/vpnsvc-internal.c diff | blob | history
Domain: Network & Connectivity / Data Network;