[OpenSIPS-Devel] [OpenSIPS/opensips] 672907: fix potential heap/buffer overflow in parsing mult...

[Bogdan Andrei IANCU]

  Branch: refs/heads/3.6
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 672907ec50d8d3547360c1013b1c21907a5fc32d
      https://github.com/OpenSIPS/opensips/commit/672907ec50d8d3547360c1013b1c21907a5fc32d
  Author: Bogdan-Andrei Iancu <bogdan at opensips.org>
  Date:   2026-09-07 (Mon, 07 Sep 2026)

  Changed paths:
    M parser/parse_body.c

  Log Message:
  -----------
  fix potential heap/buffer overflow in parsing multi-parts body

https://github.com/OpenSIPS/opensips/security/advisories/GHSA-hx7p-6j27-gjpv
Discovered by Anthropic and manually confirmed by Paweł Płatek of Trail of Bits.

(cherry picked from commit bd831dad1742aca8471c5a5c709286a79db8fb97)


  Commit: e87893ac1dacd2f45d524fd3a41a861ca1b94cbe
      https://github.com/OpenSIPS/opensips/commit/e87893ac1dacd2f45d524fd3a41a861ca1b94cbe
  Author: Bogdan-Andrei Iancu <bogdan at opensips.org>
  Date:   2026-09-07 (Mon, 07 Sep 2026)

  Changed paths:
    M parser/parse_body.c

  Log Message:
  -----------
  [parser] fix negative len computation of a body part when...

... a multipart body part contains headers and a header/body separator but no actual body content
Reported by @sandrogauci from EnbleSecurity
Completing bd831dad17

(cherry picked from commit 6c6731966795aadb9e610f677de7d972353069a4)


Compare: https://github.com/OpenSIPS/opensips/compare/3d00045abc16...e87893ac1dac

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications