[OpenSIPS-Devel] [OpenSIPS/opensips] 51b908: parse_to_param(): Rework previous fix (OSS-Fuzz)

Liviu Chircu noreply at github.com
Tue Oct 4 09:08:32 UTC 2022


  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 51b908f8fde0aa2eac8dbcfff319281625d6f3f2
      https://github.com/OpenSIPS/opensips/commit/51b908f8fde0aa2eac8dbcfff319281625d6f3f2
  Author: Liviu Chircu <liviu at opensips.org>
  Date:   2022-10-04 (Tue, 04 Oct 2022)

  Changed paths:
    M parser/parse_to.c

  Log Message:
  -----------
  parse_to_param(): Rework previous fix (OSS-Fuzz)

Invoking strlen() on a non NULL-terminated buffer is equally bad,
possibly even worse.  Instead, simply rely on the @end parameter being
correct, which is an assumption already made by the current code of the
function.

Fixes OSS-Fuzz#41073





More information about the Devel mailing list