tree c07eeace647edd13f5f5bd24176a8f5fe2090604
parent 2fbcafc9ce5d5f76b7d5fc0903c0b9019cb32d25
author Dragan Dosen <ddosen@haproxy.com> 1436278243 +0200
committer Willy Tarreau <w@1wt.eu> 1436282373 +0200
encoding latin1

BUG/MEDIUM: 51d: possible incorrect operations on smp->data.str.str

In src/51d.c, the function _51d_conv(), a final '\0' is added into
smp->data.str.str, which can cause a problem if the SMP_F_CONST flag is
set in smp->flags or if smp->data.str.size is not available.

This patch adds a check on smp->flags and smp->data.str.size, and copies
the smp->data.str.str to another buffer by using smp_dup(). If necessary,
the "const" flag is set after device detection. Also, this patch removes
the unnecessary call to chunk_reset() on temp argument.