summary |
shortlog |
log |
commit | commitdiff |
tree
raw |
patch |
inline | side by side (from parent 1:
bfaee3a)
1. Set presence to NULL incase allocation of timeout
array fails. This ensures that OCProcessPresence does
not process this cbNode, thereby preventing possible
NULL dereference of timeout.
2. Do not send request if timeout has reached/exceeded
the PresenceTimeOutSize. This prevents a possible buffer
overrun in accessing the timeout array.
https://github.sec.samsung.net/RS7-IOTIVITY/IoTivity/pull/279
(cherry picked from commit
22079af2bd0f22a80b98c3b17469c3b8ed601ede)
Change-Id: I6a16c6675236518c008a88c590264dedea698a3a
Signed-off-by: Veeraj Khokale <veeraj.sk@samsung.com>
Signed-off-by: Amit KS <amit.s12@samsung.com>
OIC_LOG(ERROR, TAG,
"Could not allocate memory for cbNode->presence->timeOut");
OICFree(cbNode->presence);
OIC_LOG(ERROR, TAG,
"Could not allocate memory for cbNode->presence->timeOut");
OICFree(cbNode->presence);
+ cbNode->presence = NULL;
result = OC_STACK_NO_MEMORY;
goto exit;
}
result = OC_STACK_NO_MEMORY;
goto exit;
}
{
FindAndDeleteClientCB(cbNode);
}
{
FindAndDeleteClientCB(cbNode);
}
}
if (now < cbNode->presence->timeOut[cbNode->presence->TTLlevel])
}
if (now < cbNode->presence->timeOut[cbNode->presence->TTLlevel])