[OpenSIPS-Devel] [OpenSIPS/opensips] 9c9cce: stir_shaken: Fix $identity variable crash on missi...
Liviu Chircu
noreply at github.com
Wed Apr 14 12:53:29 EST 2021
Branch: refs/heads/master
Home: https://github.com/OpenSIPS/opensips
Commit: 9c9cce6f366d4313469f06cdf5760332ebf77287
https://github.com/OpenSIPS/opensips/commit/9c9cce6f366d4313469f06cdf5760332ebf77287
Author: Liviu Chircu <liviu at opensips.org>
Date: 2021-04-14 (Wed, 14 Apr 2021)
Changed paths:
M modules/stir_shaken/stir_shaken.c
Log Message:
-----------
stir_shaken: Fix $identity variable crash on missing fields
Although stir_shaken_verify() correctly handles an incomplete PASSporT
such as this one:
{"orig":{"tn":"7778888"},"attest":"A","origid":"X","iat":1618403426}
(notice the "dest" claim is missing)
... if the script writer were to xlog() the $identity(dest) value before
the verification step, they would crash OpenSIPS.
Many thanks to George Joseph for helping with testing!
Issue discovered during OpenSIPIt'01 (https://opensipit.org/)
More information about the Devel
mailing list