projects / platform / core / connectivity / net-config.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f11521d) | patch
Fix stack OOB Write Vulnerability in vpn_service_init 30/317830/1 tizen_9.0
authorJaehyun Kim <jeik01.kim@samsung.com>
Wed, 8 Jan 2025 08:51:48 +0000 (17:51 +0900)
committerJaehyun Kim <jeik01.kim@samsung.com>
Wed, 8 Jan 2025 08:55:00 +0000 (17:55 +0900)
commit980719f02dd932d347346c959caa3fd4ff4f5fff
tree5275139908a8023f27265b222058eb7ea561c415tree | snapshot
parentf11521d840551d192d259680888fb93bd9196825commit | diff
Fix stack OOB Write Vulnerability in vpn_service_init

An Out of Bounds Write vulnerability was discovered and fixed
in the vpn_service_init function of net-config,
which could be used to access the stack array without validation
by using a user-provided index,
thereby setting a value(0x00) in an out-of-bounds location.

Change-Id: I6140d21a7601efe4dad96b63a35385399993fd49
Signed-off-by: Jaehyun Kim <jeik01.kim@samsung.com>
src/vpnsvc-internal.c diff | blob | history
Domain: Network & Connectivity / Data Network;