Bug ID | 1170166 |
---|---|
Summary | AUDIT-FIND: enlightenment: enlightenment_system: `_cb_l2ping_ping()` SEGFAULTs when no parameter is passed. |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | simonf.lees@suse.com |
Reporter | matthias.gerstner@suse.com |
QA Contact | qa-bugs@suse.de |
CC | matthias.gerstner@suse.com, security-team@suse.de |
Blocks | 1169238 |
Found By | --- |
Blocker | --- |
+++ This bug was initially created as a clone of Bug #1169238 e) `_cb_l2ping_ping()` SEGFAULTs when no parameter is passed. This function unconditionally dereferences the `params` string in a `sscanf()` call, which causes a SEGFAULT by dereferencing a NULL pointer when a user is not passing any parameter data.