[QPID-3030] C++ buffer encoding allows overflow on write.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9
• Fix Version/s: 0.9
• Component/s: C++ Broker, C++ Client

Environment

Linux

• Assignee: Ken Giusti
• Reporter: Ken Giusti
• Created: 01/Feb/11 16:36
• Updated: 29/Jul/13 18:54
• Resolved: 01/Feb/11 17:16

Description

The framing Buffer::put

{Short,Medium,Long}

String() or Buffer::putRawData() do not validate the length of the written data, and may allow overflow of the buffer.