[OpenSIPS-Devel] [OpenSIPS/opensips] 837263: parse_content_length(): Fix integer overflow edge-...

Liviu Chircu noreply at github.com
Fri Oct 7 15:40:03 UTC 2022


  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 837263b47dcb33909b109b5cc050c1ab4a6c64a2
      https://github.com/OpenSIPS/opensips/commit/837263b47dcb33909b109b5cc050c1ab4a6c64a2
  Author: Liviu Chircu <liviu at opensips.org>
  Date:   2022-10-07 (Fri, 07 Oct 2022)

  Changed paths:
    M parser/parse_content.c

  Log Message:
  -----------
  parse_content_length(): Fix integer overflow edge-case (OSS-Fuzz)

This completes commit 7cab422e2f, where it was still possible to cause
an integer overflow even after the fix, with input such as 2147483609,
due to missing parentheses in the number equation.

Fixes OSS-Fuzz#52112





More information about the Devel mailing list