Red Hat Bugzilla – Bug 1183982
Memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url
Last modified: 2015-11-19 03:33:31 EST
See https://bugzilla.gnome.org/show_bug.cgi?id=742644 for a detailed description: « Debarshi Ray [reporter] [developer] 2015-01-09 13:37:20 UTC The librest build has this warning which is not as harmless as it might appear: CC librest_0.7_la-oauth-proxy-call.lo oauth-proxy-call.c: In function 'sign_hmac': oauth-proxy-call.c:130:3: warning: implicit declaration of function 'rest_proxy_call_get_url' [-Wimplicit-function-declaration] url_str = rest_proxy_call_get_url (call); ^ oauth-proxy-call.c:130:11: warning: assignment makes pointer from integer without a cast url_str = rest_proxy_call_get_url (call); ^ The compiler assumes int as the return type, but in reality it returns a pointer. Using the function without a prototype will lead to memory errors when the size of an int is not the same as a pointer. You can trigger a crash by running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account. » Fixed by https://git.gnome.org/browse/librest/commit/?id=b50ace7738ea03817acdad87fb2b338a86018329
Moving to POST as a patch is available for this issue.
CVE request posted: http://www.openwall.com/lists/oss-security/2015/03/04/6
I have built rest-0.7.92-2.el7: https://brewweb.devel.redhat.com/taskinfo?taskID=9127499
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-2237.html