Branch: refs/heads/master Home: https://github.com/OpenSIPS/opensips Commit: 2617c97207b1fe2afead9f887f7a5df4da3b7d55 https://github.com/OpenSIPS/opensips/commit/2617c97207b1fe2afead9f887f7a5df4da3b7d55 Author: Razvan Crainea <raz...@opensips.org> Date: 2021-10-08 (Fri, 08 Oct 2021)
Changed paths: M parser/sdp/sdp_helpr_funcs.c Log Message: ----------- Fix crash in parse_sdp when a= is empty When a bogus SDP was provided, with an empty `a=` line, there was no check for the length to be compared, resulting in a bad memory access, hence a crash. Issue discovered during OpenSIPS Security Audit 2021, by Alfred Farrugia & Sandro Gauci (Enable Security) _______________________________________________ Devel mailing list Devel@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/devel