Branch: refs/heads/3.6
Home: https://github.com/OpenSIPS/opensips
Commit: 672907ec50d8d3547360c1013b1c21907a5fc32d
https://github.com/OpenSIPS/opensips/commit/672907ec50d8d3547360c1013b1c21907a5fc32d
Author: Bogdan-Andrei Iancu <[email protected]>
Date: 2026-09-07 (Mon, 07 Sep 2026)
Changed paths:
M parser/parse_body.c
Log Message:
-----------
fix potential heap/buffer overflow in parsing multi-parts body
https://github.com/OpenSIPS/opensips/security/advisories/GHSA-hx7p-6j27-gjpv
Discovered by Anthropic and manually confirmed by Paweł Płatek of Trail of Bits.
(cherry picked from commit bd831dad1742aca8471c5a5c709286a79db8fb97)
Commit: e87893ac1dacd2f45d524fd3a41a861ca1b94cbe
https://github.com/OpenSIPS/opensips/commit/e87893ac1dacd2f45d524fd3a41a861ca1b94cbe
Author: Bogdan-Andrei Iancu <[email protected]>
Date: 2026-09-07 (Mon, 07 Sep 2026)
Changed paths:
M parser/parse_body.c
Log Message:
-----------
[parser] fix negative len computation of a body part when...
... a multipart body part contains headers and a header/body separator but no
actual body content
Reported by @sandrogauci from EnbleSecurity
Completing bd831dad17
(cherry picked from commit 6c6731966795aadb9e610f677de7d972353069a4)
Compare:
https://github.com/OpenSIPS/opensips/compare/3d00045abc16...e87893ac1dac
To unsubscribe from these emails, change your notification settings at
https://github.com/OpenSIPS/opensips/settings/notifications
_______________________________________________
Devel mailing list
[email protected]
http://lists.opensips.org/cgi-bin/mailman/listinfo/devel
