[Freeassociation-devel] Crash with attachment on libical 0.46

Milan Crha mcrha at redhat.com
Tue Aug 16 22:39:21 PDT 2011


	Hi,
there is a Gnome bug [1], which reporter discovered an issue with
libical, when it parses an event with URI attachments, then accessing
the URI itself (through libical API) crashes the application. GDB claims
that the memory returned by the icalattach_get_url() is not valid (its
address is out of range). The memory pointer seems suspicious, and
changing the URI itself to something else (by replacing certain letters
with 'x' or similar letter in it results in a "not a URI attachment"
parser result).

I was able to reproduce this with latest libical release (0.46), thus
I'm reporting it to you.

See the attached test code, it contains good and bad event. One works as
expected, the other not.

	Bye,
	Milan

[1] https://bugzilla.gnome.org/show_bug.cgi?id=655120
-------------- next part --------------
A non-text attachment was scrubbed...
Name: a.c
Type: text/x-csrc
Size: 2729 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/libical-devel/attachments/20110817/f3d56c66/attachment.bin>


More information about the libical-devel mailing list