From: Jo-Philipp Wich <jow@openwrt.org>
Date: Wed, 30 May 2012 15:30:07 +0000 (+0000)
Subject: [package] uhttpd: fix wrongly applied sizeof() leading to writing beyound end of... 
X-Git-Url: http://207.154.207.93/?a=commitdiff_plain;h=e2b17e1784016ad7fe5ee8e45c0742b14a5fe431;p=15.05%2Fopenwrt.git

[package] uhttpd: fix wrongly applied sizeof() leading to writing beyound end of buffer and subsequent data corruption (#11557)

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@32005 3c298f89-4303-0410-b956-a3cf2f4a3e73
---

diff --git a/package/uhttpd/Makefile b/package/uhttpd/Makefile
index f30d6cabd1..13da14dfe9 100644
--- a/package/uhttpd/Makefile
+++ b/package/uhttpd/Makefile
@@ -8,7 +8,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=uhttpd
-PKG_RELEASE:=33
+PKG_RELEASE:=34
 
 PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
 PKG_CONFIG_DEPENDS := \
diff --git a/package/uhttpd/src/uhttpd.c b/package/uhttpd/src/uhttpd.c
index e10f5dc9e1..d5d5dfb982 100644
--- a/package/uhttpd/src/uhttpd.c
+++ b/package/uhttpd/src/uhttpd.c
@@ -385,10 +385,10 @@ static struct http_request * uh_http_header_recv(struct client *cl)
 	char *bufptr = cl->httpbuf.buf;
 	char *idxptr = NULL;
 
-	ssize_t blen = sizeof(cl->httpbuf)-1;
+	ssize_t blen = sizeof(cl->httpbuf.buf)-1;
 	ssize_t rlen = 0;
 
-	memset(bufptr, 0, sizeof(cl->httpbuf));
+	memset(bufptr, 0, sizeof(cl->httpbuf.buf));
 
 	while (blen > 0)
 	{