From 66787725fea5fc40d9377f0cc38771a7d90e3436 Mon Sep 17 00:00:00 2001 From: Claudio Takahasi Date: Wed, 14 Nov 2007 20:41:13 +0000 Subject: app specific passkey agent: missing invalid args verification --- hcid/dbus-security.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/hcid/dbus-security.c b/hcid/dbus-security.c index 6d510587..1383a263 100644 --- a/hcid/dbus-security.c +++ b/hcid/dbus-security.c @@ -261,6 +261,9 @@ static DBusHandlerResult register_passkey_agent(DBusConnection *conn, DBUS_TYPE_INVALID)) return error_invalid_arguments(conn, msg); + if ((check_address(addr) < 0) || (path[0] != '/')) + return error_invalid_arguments(conn, msg); + memset(&ref, 0, sizeof(ref)); ref.name = (char *) dbus_message_get_sender(msg); -- cgit