[OpenSIPS-Devel] [OpenSIPS/opensips] 263e19: stir_shaken: Fix $identity variable crash on missi...

Liviu Chircu noreply at github.com
Wed Apr 14 12:53:46 EST 2021


  Branch: refs/heads/3.1
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 263e19aea9f2d4434ba46f828264a3cda49c3298
      https://github.com/OpenSIPS/opensips/commit/263e19aea9f2d4434ba46f828264a3cda49c3298
  Author: Liviu Chircu <liviu at opensips.org>
  Date:   2021-04-14 (Wed, 14 Apr 2021)

  Changed paths:
    M modules/stir_shaken/stir_shaken.c

  Log Message:
  -----------
  stir_shaken: Fix $identity variable crash on missing fields

Although stir_shaken_verify() correctly handles an incomplete PASSporT
such as this one:

  {"orig":{"tn":"7778888"},"attest":"A","origid":"X","iat":1618403426}
	(notice the "dest" claim is missing)

... if the script writer were to xlog() the $identity(dest) value before
the verification step, they would crash OpenSIPS.

Many thanks to George Joseph for helping with testing!

Issue discovered during OpenSIPIt'01 (https://opensipit.org/)

(cherry picked from commit 9c9cce6f366d4313469f06cdf5760332ebf77287)





More information about the Devel mailing list