Crash when distributing MSI files with long MST path

  • 3680096
  • 27-Feb-2007
  • 30-Apr-2012

Environment

Novell ZENworks 7 Desktop Management - ZDM7 Application Launcher (NAL)

Situation

When distributing MSI files with long MST paths a NAL crash can occur.

Resolution

Fixed in ZENworks 7 Desktop Management Service Pack 1 Interim Release 3a, see KB 3484245 "Updates to Novell ZENworks 7 Desktop Management" which can be found at https://www.novell.com/support

Additional Information

The crash occurs due to a buffer overrun on the heap. When processing an MSI file, a check is made whether there are any transform files. If there are, we are replacing macros in the path to the MST. This is where the buffer overrun occurs. If the expanded path is longer than the original path, then we are overwriting memory on the heap. Fixed in ZDM7sp1hp1 or newer.