[OpenSIPS-Devel] [OpenSIPS/opensips] 263e19: stir_shaken: Fix $identity variable crash on missi...
Liviu Chircu
noreply at github.com
Wed Apr 14 12:53:46 EST 2021
Branch: refs/heads/3.1
Home: https://github.com/OpenSIPS/opensips
Commit: 263e19aea9f2d4434ba46f828264a3cda49c3298
https://github.com/OpenSIPS/opensips/commit/263e19aea9f2d4434ba46f828264a3cda49c3298
Author: Liviu Chircu <liviu at opensips.org>
Date: 2021-04-14 (Wed, 14 Apr 2021)
Changed paths:
M modules/stir_shaken/stir_shaken.c
Log Message:
-----------
stir_shaken: Fix $identity variable crash on missing fields
Although stir_shaken_verify() correctly handles an incomplete PASSporT
such as this one:
{"orig":{"tn":"7778888"},"attest":"A","origid":"X","iat":1618403426}
(notice the "dest" claim is missing)
... if the script writer were to xlog() the $identity(dest) value before
the verification step, they would crash OpenSIPS.
Many thanks to George Joseph for helping with testing!
Issue discovered during OpenSIPIt'01 (https://opensipit.org/)
(cherry picked from commit 9c9cce6f366d4313469f06cdf5760332ebf77287)
More information about the Devel
mailing list