Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: c585e0659254530cb4820676b7d44540ac3e52ec
      
https://github.com/OpenSIPS/opensips/commit/c585e0659254530cb4820676b7d44540ac3e52ec
  Author: James Stanley <ja...@incoherency.co.uk>
  Date:   2025-06-12 (Thu, 12 Jun 2025)

  Changed paths:
    M modules/dns_cache/dns_cache.c

  Log Message:
  -----------
  Fix buffer overflow in dnscache (#3669)

`addr_no` and `alias_no` are calculated based on whichever is
smaller out of the actual number of addresses/aliases, and
`MAXADDRS-1`/`MAXALIASES-1`.

But then the code inserted all of the actual number of
addresses/aliases anyway, which makes for a potential buffer
overflow, and corrupted deserialisation later.


  Commit: 03719466e15d7ce7a30ef4434761886bd8d3ac37
      
https://github.com/OpenSIPS/opensips/commit/03719466e15d7ce7a30ef4434761886bd8d3ac37
  Author: Bogdan Andrei IANCU <bog...@opensips.org>
  Date:   2025-06-16 (Mon, 16 Jun 2025)

  Changed paths:
    M modules/dns_cache/dns_cache.c

  Log Message:
  -----------
  Merge pull request #3672 from jes/dnscache-fix

Fix buffer overflow in dnscache (#3669)


Compare: 
https://github.com/OpenSIPS/opensips/compare/45f498b18f75...03719466e15d

To unsubscribe from these emails, change your notification settings at 
https://github.com/OpenSIPS/opensips/settings/notifications

_______________________________________________
Devel mailing list
Devel@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel

Reply via email to