[OpenSIPS-Devel] [OpenSIPS/opensips] b68c13: fix potential heap/buffer overflow in parsing mult...

[Bogdan Andrei IANCU]

  Branch: refs/heads/4.0
  Home:   https://github.com/OpenSIPS/opensips
  Commit: b68c13842dfdaaba9ec2a15e9b141ca511095dda
      https://github.com/OpenSIPS/opensips/commit/b68c13842dfdaaba9ec2a15e9b141ca511095dda
  Author: Bogdan-Andrei Iancu <bogdan at opensips.org>
  Date:   2026-09-07 (Mon, 07 Sep 2026)

  Changed paths:
    M parser/parse_body.c

  Log Message:
  -----------
  fix potential heap/buffer overflow in parsing multi-parts body

https://github.com/OpenSIPS/opensips/security/advisories/GHSA-hx7p-6j27-gjpv
Discovered by Anthropic and manually confirmed by Paweł Płatek of Trail of Bits.

(cherry picked from commit bd831dad1742aca8471c5a5c709286a79db8fb97)


  Commit: dc573ad7423820d418dd621b64cf2473027733fa
      https://github.com/OpenSIPS/opensips/commit/dc573ad7423820d418dd621b64cf2473027733fa
  Author: Bogdan-Andrei Iancu <bogdan at opensips.org>
  Date:   2026-09-07 (Mon, 07 Sep 2026)

  Changed paths:
    M parser/parse_body.c

  Log Message:
  -----------
  [parser] fix negative len computation of a body part when...

... a multipart body part contains headers and a header/body separator but no actual body content
Reported by @sandrogauci from EnbleSecurity
Completing bd831dad17

(cherry picked from commit 6c6731966795aadb9e610f677de7d972353069a4)


Compare: https://github.com/OpenSIPS/opensips/compare/3282dc3cf45d...dc573ad74238

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications