File 0001-xml_parser_ns_add-alloc-item-size-not-pointer-size.patch of Package openwsman.1064
From 55f46b4bb8e7cd2e837c820c7f11fe2448916fa2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Klaus=20K=C3=A4mpf?= <kkaempf@suse.de>
Date: Fri, 12 Sep 2014 09:48:24 +0200
Subject: [PATCH 1/6] xml_parser_ns_add: alloc item size, not pointer size
Memory corruption due to a malloc made with the wrong size in
function xml_parser_ns_add of module wsman-libxml2-binding.
Reported and fixed by Yves Vinter <yves.vinter@bull.net>
---
src/lib/wsman-libxml2-binding.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/lib/wsman-libxml2-binding.c b/src/lib/wsman-libxml2-binding.c
index 06b14e58e523..18c21a9f2597 100644
--- a/src/lib/wsman-libxml2-binding.c
+++ b/src/lib/wsman-libxml2-binding.c
@@ -490,7 +490,7 @@ xml_parser_ns_add(WsXmlNodeH node, const char *uri, const char *prefix)
*/
if (xmlNs == NULL && strcmp(prefix,"xml") == 0
&& strcmp(uri, (const char *)XML_XML_NAMESPACE) == 0) {
- xmlNs = (xmlNsPtr) u_zalloc(sizeof(xmlNs));
+ xmlNs = (xmlNsPtr) u_zalloc(sizeof(*xmlNs));
if (xmlNs == NULL) {
error("Couldn't create a new Namespace structure");
return(NULL);
--
2.1.4