Opened 12 years ago

Closed 12 years ago

Last modified 12 years ago

#2709 closed Bug (fixed)

RPC files-unwanted out-of-bounds access

Reported by: ierotuweoit Owned by: charles
Priority: Normal Milestone: 1.77
Component: libtransmission Version: 1.50
Severity: Normal Keywords:
Cc:

Description

RPC call to "torrent-add" with "files-unwanted" that contains indices not present in the torrent causes Transmission to crash.

Thread 2 Crashed: 0 org.m0k.transmission 0x0000000100064f76 tr_torrentInitFileDLs + 384 1 org.m0k.transmission 0x000000010008efd6 tr_ctorInitTorrentWanted + 46 2 org.m0k.transmission 0x000000010006aab6 torrentInit + 454 3 org.m0k.transmission 0x000000010006ad8a tr_torrentNew + 281 4 org.m0k.transmission 0x000000010005ca71 addTorrentImpl + 65 5 org.m0k.transmission 0x000000010005ced2 torrentAdd + 896 6 org.m0k.transmission 0x000000010005996b request_exec + 933 7 org.m0k.transmission 0x0000000100059a2f tr_rpc_request_exec_json + 119 8 org.m0k.transmission 0x000000010005eac0 handle_request + 2677 9 org.m0k.transmission 0x00000001000b0d13 evhttp_read_body + 349 10 org.m0k.transmission 0x00000001000acb78 event_base_loop + 1148 11 org.m0k.transmission 0x000000010007985c libeventThreadFunc + 162 12 libSystem.B.dylib 0x00007fff818fef8e _pthread_start + 331 13 libSystem.B.dylib 0x00007fff818fee41 thread_start + 13

Change History (4)

comment:1 Changed 12 years ago by charles

  • Milestone changed from None Set to 1.80
  • Version changed from 1.76+ to 1.50

Fixed in trunk for 1.80 by r9855

comment:2 Changed 12 years ago by charles

  • Component changed from Daemon to libtransmission
  • Owner set to charles
  • Status changed from new to assigned

comment:3 Changed 12 years ago by charles

  • Resolution set to fixed
  • Status changed from assigned to closed

comment:4 Changed 12 years ago by charles

  • Milestone changed from 1.80 to 1.77

backported to the 1.7x branch for 1.77 by r9878

Note: See TracTickets for help on using tickets.