[OpenSIPS-Devel] [OpenSIPS/opensips] 5e9f72: parse_via(): Fix out-of-bounds read edge-case (OSS...

Liviu Chircu noreply at github.com
Thu Nov 3 16:35:24 UTC 2022


  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 5e9f72d3d90e8fc9cb20578a95c891631b4d91da
      https://github.com/OpenSIPS/opensips/commit/5e9f72d3d90e8fc9cb20578a95c891631b4d91da
  Author: Liviu Chircu <liviu at opensips.org>
  Date:   2022-11-03 (Thu, 03 Nov 2022)

  Changed paths:
    M parser/parse_via.c
    M parser/test/test_parser.c

  Log Message:
  -----------
  parse_via(): Fix out-of-bounds read edge-case (OSS-Fuzz)

This patch fixes a possible off-by-one read overflow while parsing the
Via buffer.  Even so, the error was mostly harmless, as the supplied
buffer is typically much larger and is guaranteed to be NULL-terminated
(see udp_read_req(), for example).

Severity: Low
Fixes OSS-Fuzz#52326





More information about the Devel mailing list