LibOSDP vulnerable to a null pointer deref in osdp_reply_name

Issue:At ospdcommon.c, on the osdpreplyname function, any reply id between REPLYACK and REPLYXRD is valid, but names array do not declare all of the range. On a case of an undefined reply id within the range, name will be null name = namesreplyid - REPLYACK;. Null name will casue a crash on next...

PT-2024-35162

Name of the Vulnerable Software and Affected Versions libosdp versions prior to 2.4.0 Description The issue arises from a null pointer dereference in the osdp reply name function at ospd common.c. Any reply id between REPLY ACK and REPLY XRD is considered valid, but the names array does not decla...