patch from Stefan Kratochwil <entwicklung@inovel.de> : canfestival-3-fm3_698.patch
Bug:
If an object dictionary entry was requested whose size exceeds
SDO_MAX_LENGTH_TRANSFERT, the memcpy() call at line 139 of objacces.c overwrites
the memory after *pDestData which causes stack corruption.
-> Bugfix:
The bug was corrected by size checking the requested data. An 'Out of
memory' error message will be generated if the requested data exceeds
SDO_MAX_LENGTH_TRANSFERT.
Additional changes:
Added dynamic buffer allocation for the SDO transfer. This feature can be used
if SDO_DYNAMIC_BUFFER_ALLOCATION is defined in config.h. The size of the
dynamically allocated buffer is controlled with
SDO_DYNAMIC_BUFFER_ALLOCATION_SIZE.
-> Note:
This change removes the detection of OD_LENGTH_DATA_INVALID errors!
<HTML>
<BODY>
<CENTER>
<IMG SRC="canfestival.gif">
<BR><BR>
<font size="3">CanFestival is an OpenSource (LGPL) CANOpen framework.</font>
<BR><BR>
<a href="http://canfestival.sourceforge.net">http://canfestival.sourceforge.net</a>
<BR><BR>
Copyright �: Edouard TISSERANT, Francis DUPIN and Laurent BESSARD
<BR><BR>
Version: CAN Festival 3.0
<BR><BR>
<TABLE border="0">
<TR>
<TD align="right" valign="top">
Contributor :
</TD>
<TD align="left" valign="top">
LIVIC<BR>
<a href="http://www.inrets.fr/ur/livic">http://www.inrets.fr/ur/livic</a>
</TD>
</TR>
<TR>
<TD align="right" valign="top">
Supported by :
</TD>
</TR>
</TABLE>
</CENTER>
</BODY>
</HTML>