#2709 closed Bug (fixed)
RPC files-unwanted out-of-bounds access
| Reported by: | ierotuweoit | Owned by: | charles |
|---|---|---|---|
| Priority: | Normal | Milestone: | 1.77 |
| Component: | libtransmission | Version: | 1.50 |
| Severity: | Normal | Keywords: | |
| Cc: |
Description
RPC call to "torrent-add" with "files-unwanted" that contains indices not present in the torrent causes Transmission to crash.
Thread 2 Crashed: 0 org.m0k.transmission 0x0000000100064f76 tr_torrentInitFileDLs + 384 1 org.m0k.transmission 0x000000010008efd6 tr_ctorInitTorrentWanted + 46 2 org.m0k.transmission 0x000000010006aab6 torrentInit + 454 3 org.m0k.transmission 0x000000010006ad8a tr_torrentNew + 281 4 org.m0k.transmission 0x000000010005ca71 addTorrentImpl + 65 5 org.m0k.transmission 0x000000010005ced2 torrentAdd + 896 6 org.m0k.transmission 0x000000010005996b request_exec + 933 7 org.m0k.transmission 0x0000000100059a2f tr_rpc_request_exec_json + 119 8 org.m0k.transmission 0x000000010005eac0 handle_request + 2677 9 org.m0k.transmission 0x00000001000b0d13 evhttp_read_body + 349 10 org.m0k.transmission 0x00000001000acb78 event_base_loop + 1148 11 org.m0k.transmission 0x000000010007985c libeventThreadFunc + 162 12 libSystem.B.dylib 0x00007fff818fef8e _pthread_start + 331 13 libSystem.B.dylib 0x00007fff818fee41 thread_start + 13
Change History (4)
comment:1 Changed 13 years ago by charles
- Milestone changed from None Set to 1.80
- Version changed from 1.76+ to 1.50
comment:2 Changed 13 years ago by charles
- Component changed from Daemon to libtransmission
- Owner set to charles
- Status changed from new to assigned
comment:3 Changed 13 years ago by charles
- Resolution set to fixed
- Status changed from assigned to closed
comment:4 Changed 13 years ago by charles
- Milestone changed from 1.80 to 1.77
backported to the 1.7x branch for 1.77 by r9878
Fixed in trunk for 1.80 by r9855