Browse Source
The affected code was ported from H'uru where NetVaultNode has a zeroing constructor. OU does not have a zeroing constructor for this class, and instead assumes that all allocations will be done with NEWZERO (there is a debug mode assertion to this effect). The result of the improper allocation is that the node fields flag could be garbage, causing a vault node with random contents to be written to the server. Unfortunately, NetVaultNode::Read_LCS is not extremely resilient to reading in unexpected data, so this may result in a crash.tickets/23/23/1
Adam Johnson
3 years ago
1 changed files with 1 additions and 1 deletions
Loading…
Reference in new issue