[OpenSIPS-Devel] [OpenSIPS/opensips] ee9a0b: b2b_sca: fix potential heap/buffer overflow in uri

[Răzvan Crainea]

  Branch: refs/heads/4.0
  Home:   https://github.com/OpenSIPS/opensips
  Commit: ee9a0baaf55d6c1ba70d51a662410f6960bc433a
      https://github.com/OpenSIPS/opensips/commit/ee9a0baaf55d6c1ba70d51a662410f6960bc433a
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-06-05 (Fri, 05 Jun 2026)

  Changed paths:
    M modules/b2b_sca/sca_logic.c

  Log Message:
  -----------
  b2b_sca: fix potential heap/buffer overflow in uri

If the display name needs to be escaped, we need way more space to fit
it, and if we don't allocate that much, it can lead to mem corruption.

Credits go to  R4mbb of KRsecurity(<yong010301 at gmail.com>) for reporting
it and providing a fix.

(cherry picked from commit 8f1be98346769100cbd43cc4124b24cf24a6b0d1)



To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications