I looked at size and offset in FS_w_page, and it result into a
buffer-overflow when writing too many characters.
It will try to copy 9 bytes into a buffer which is 8 bytes long.

# owwrite /26.80A742000000/pages/page.3 123456789
DEBUG: ow_2438.c:FS_w_page(159) size=9 offset=0

That function certainly needs to be fixed, but I don't have time to do it
right now.
I'm on vacation right now, and I'm alone with my twins.

/Christian


-----Original Message-----
From: Steinar Midtskogen [mailto:[email protected]] 
Sent: den 8 juli 2009 14:38
To: [email protected]
Subject: [Owfs-developers] Writing tto much to DS2438 memory crashes
owserver

For example:

1. owwrite -s server:port 26.XXXXXXXXXXXX/page.3 123456789
2. owserver dies

owserver should either ignore the extra characters ("9" in this
example), or reject the request altogether.

I haven't checked if this also applies to writing memory on other DS chips.

-- 
Steinar ; NIL DIFFICILE VOLENTI ; http://latinitas.org ;
http://voksenlia.net

----------------------------------------------------------------------------
--
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time, 
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize

details at: http://p.sf.net/sfu/Challenge
_______________________________________________
Owfs-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/owfs-developers

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time, 
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
Owfs-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/owfs-developers

Reply via email to