Backport of svn 395 and 434:
395: Bob Ciora's patch for lazy UpnpAcceptSubscription(). 434: Fixed a buffer overflow due to a bug in the calculation of the CONTENT-TYPE header line size, the length was beeing calculated with the wrong string, there was a missing colon. git-svn-id: https://pupnp.svn.sourceforge.net/svnroot/pupnp/branches/branch-1.6.x@461 119443c7-1b9e-41f8-b6fc-b9c35fce742c
This commit is contained in:
@@ -2355,10 +2355,13 @@ UpnpAcceptSubscription( IN UpnpDevice_Handle Hnd,
|
||||
HandleUnlock();
|
||||
return UPNP_E_INVALID_PARAM;
|
||||
}
|
||||
/* Now accepts an empty state list, so the code below is commented out */
|
||||
#if 0
|
||||
if( VarName == NULL || NewVal == NULL || cVariables < 0 ) {
|
||||
HandleUnlock();
|
||||
return UPNP_E_INVALID_PARAM;
|
||||
}
|
||||
#endif
|
||||
|
||||
HandleUnlock();
|
||||
retVal =
|
||||
@@ -2431,11 +2434,13 @@ UpnpAcceptSubscriptionExt( IN UpnpDevice_Handle Hnd,
|
||||
HandleUnlock();
|
||||
return UPNP_E_INVALID_PARAM;
|
||||
}
|
||||
|
||||
/* Now accepts an empty state list, so the code below is commented out */
|
||||
#if 0
|
||||
if( PropSet == NULL ) {
|
||||
HandleUnlock();
|
||||
return UPNP_E_INVALID_PARAM;
|
||||
}
|
||||
#endif
|
||||
|
||||
HandleUnlock();
|
||||
retVal = genaInitNotifyExt( Hnd, DevID, ServName, PropSet, SubsId );
|
||||
|
Reference in New Issue
Block a user