Bug in sms

Gu, Yang yang.gu at intel.com
Wed Sep 16 01:22:49 PDT 2009


Hi,
	Today I tried oFono with my cell phone, but it crashed when starting up. The problem happens in function at_cmgl_notify() of file drivers/atmodem/sms.c. In my case, strlen(hexpdu) == 338, but the buffer "pdu" has maximum size of 164. So after decode_hex_own_buf(), some memory was written unexpectedly. Call for a fix, please.


Regards,
-Yang




More information about the ofono mailing list