#66 Memory corruption when sending a reply with data size longer than data size of request message

[José Alberto García]

Line 2514 of file "trdp_mdcom.c" (r1330):
pSenderElement->pPacket = (MD_PACKET_T ) vos_memAlloc(pSenderElement->grossSize);
should be replaced for:
pSenderElement->pPacket = (MD_PACKET_T ) vos_memAlloc(trdp_packetSizeMD(dataSize));

[Armin-Hagen Weiss]

Recalculation of pSenderElement->grossSize missing for Me, Mq, Mp.

[mike]

Within [r1337] the code section from line 2742 to 2752 preceeds the de/alloc block mentioned above.
Improving the conditions around this alloc block is pending and better targetted within [#64].

Closing this ticket

[Armin-Hagen Weiss]

I will be out of the office starting 10.10.2014 and will not return until
13.10.2014.

I'll reply as fast as possible.