SegmentFault in mmsServer_handleGetNameListRequest in src/mms/iso_mms/server/mms_get_namelist_service.c

[Alice-and-Bob]

SegmentFault in mmsServer_handleGetNameListRequest in src/mms/iso_mms/server/mms_get_namelist_service.c

[Alice-and-Bob]

hi，@mzillgith and teams. If you handle the error as soon as possible, I will provide all possible information

[mzillgith]

Hi,
Thank you. However you are using a very old version of the library. Seems the problem is already fixed in the current versions of the library.
But applying your poc2 seems to trigger another issue that should be fixed with commit cf94d64

[Alice-and-Bob]

Hi, Thank you. However you are using a very old version of the library. Seems the problem is already fixed in the current versions of the library. But applying your poc2 seems to trigger another issue that should be fixed with commit cf94d64

Yes, I found the bug fixed by the cf94d64 branch using poc2 before your. It is possible that I am mistaken about the poc and the vulnerability it corresponds to. However, this poc can cause SEGV errors in all versions before the fix is committed. I will address this in more detail in a separate issue.