patch from Stefan Kratochwil <entwicklung@inovel.de> : canfestival-3-fm3_698.patch
Bug:
If an object dictionary entry was requested whose size exceeds
SDO_MAX_LENGTH_TRANSFERT, the memcpy() call at line 139 of objacces.c overwrites
the memory after *pDestData which causes stack corruption.
-> Bugfix:
The bug was corrected by size checking the requested data. An 'Out of
memory' error message will be generated if the requested data exceeds
SDO_MAX_LENGTH_TRANSFERT.

Additional changes:
Added dynamic buffer allocation for the SDO transfer. This feature can be used
if SDO_DYNAMIC_BUFFER_ALLOCATION is defined in config.h. The size of the
dynamically allocated buffer is controlled with
SDO_DYNAMIC_BUFFER_ALLOCATION_SIZE.
-> Note:
This change removes the detection of OD_LENGTH_DATA_INVALID errors!

     1

     2

/* File generated by gen_cfile.py. Should not be modified. */

     3

     4

#ifndef WIN32TEST_H

     5

#define WIN32TEST_H

     6

     7

#include "data.h"

     8

     9

/* Prototypes of function provided by object dictionnary */

    10

UNS32 win32test_valueRangeTest (UNS8 typeValue, void * value);

    11

const indextable * win32test_scanIndexOD (UNS16 wIndex, UNS32 * errorCode, ODCallback_t **callbacks);

    12

    13

/* Master node data struct */

    14

extern CO_Data win32test_Data;

    15

    16

#endif // WIN32TEST_H