Skip to content

Instantly share code, notes, and snippets.

@zdi-team

zdi-team/CVE-2021-21974-snippet-1.cpp Secret

Created March 1, 2021 21:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save zdi-team/8301c65794c2be247da305fdff164533 to your computer and use it in GitHub Desktop.
Save zdi-team/8301c65794c2be247da305fdff164533 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
CVE-2021-21974-snippet-1.cpp
__int64 __fastcall SLPParseSrvUrl(int srvurllen, const char *srvurl, _QWORD *a3)
{
// ...
obuf = calloc(1uLL, srvurllen + 53LL);
if ( !obuf )
return 12LL;
v6 = strstr(srvurl, ":/"); // <-- (5)
if ( !v6 )
{
free(obuf);
return 22LL;
}
memcpy((char *)obuf + 41, srvurl, v6 - srvurl); // <-- (6)
// ...
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment