1.0.2 (#10)

Author: hroederld

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All notable changes to the LaunchDarkly C server-side SDK will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org).
 
+## [1.0.2] - 2019-07-26
+### Fixed
+- Undefined behavior associated with branching on an uninitialized variable when parsing server time headers
+
 ## [1.0.1] - 2019-07-11
 ### Fixed
 - Updated CMAKE header search to include `/usr/local/include` for OSX Mojave

include/launchdarkly/api.h

@@ -8,7 +8,7 @@
 /** @brief The current SDK version string. This value adheres to semantic
  * versioning and is included in the HTTP user agent sent to LaunchDarkly.
  */
-#define LD_SDK_VERSION "1.0.1"
+#define LD_SDK_VERSION "1.0.2"
 
 #ifdef __cplusplus
 extern "C" {

src/events.c

@@ -1066,6 +1066,8 @@ LDi_onHeader(const char *buffer, const size_t size,
 
     client = context;
 
+    memset(&tm, 0, sizeof(struct tm));
+
     /* ensures we do not segfault if not terminated */
     if (!(headerend = strnchr(buffer, '\r', total))) {
         LD_LOG(LD_LOG_ERROR, "failed to find end of header");