[OpenSIPS-Devel] [OpenSIPS/opensips] d6a21d: b2b_sca: fix potential heap/buffer overflow in uri

[Răzvan Crainea]

  Branch: refs/heads/3.6
  Home:   https://github.com/OpenSIPS/opensips
  Commit: d6a21d5436454b9fdb922bccf1251d5163db11f9
      https://github.com/OpenSIPS/opensips/commit/d6a21d5436454b9fdb922bccf1251d5163db11f9
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-06-05 (Fri, 05 Jun 2026)

  Changed paths:
    M modules/b2b_sca/sca_logic.c

  Log Message:
  -----------
  b2b_sca: fix potential heap/buffer overflow in uri

If the display name needs to be escaped, we need way more space to fit
it, and if we don't allocate that much, it can lead to mem corruption.

Credits go to  R4mbb of KRsecurity(<yong010301 at gmail.com>) for reporting
it and providing a fix.

(cherry picked from commit 8f1be98346769100cbd43cc4124b24cf24a6b0d1)



To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications