[OpenSIPS-Devel] [OpenSIPS/opensips] 9c9cce: stir_shaken: Fix $identity variable crash on missi...

Liviu Chircu noreply at github.com
Wed Apr 14 12:53:29 EST 2021


  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 9c9cce6f366d4313469f06cdf5760332ebf77287
      https://github.com/OpenSIPS/opensips/commit/9c9cce6f366d4313469f06cdf5760332ebf77287
  Author: Liviu Chircu <liviu at opensips.org>
  Date:   2021-04-14 (Wed, 14 Apr 2021)

  Changed paths:
    M modules/stir_shaken/stir_shaken.c

  Log Message:
  -----------
  stir_shaken: Fix $identity variable crash on missing fields

Although stir_shaken_verify() correctly handles an incomplete PASSporT
such as this one:

  {"orig":{"tn":"7778888"},"attest":"A","origid":"X","iat":1618403426}
	(notice the "dest" claim is missing)

... if the script writer were to xlog() the $identity(dest) value before
the verification step, they would crash OpenSIPS.

Many thanks to George Joseph for helping with testing!

Issue discovered during OpenSIPIt'01 (https://opensipit.org/)





More information about the Devel mailing list