Module: kamailio
Branch: 5.8
Commit: e291a957634dc4ce30a2ea538364469104c37a2a
URL: 
https://github.com/kamailio/kamailio/commit/e291a957634dc4ce30a2ea538364469104c37a2a

Author: Daniel-Constantin Mierla <[email protected]>
Committer: Daniel-Constantin Mierla <[email protected]>
Date: 2026-01-05T09:32:24+01:00

sms: check for name field length

(cherry picked from commit 6118e5b654e7344bf68ca0b77f4f39567980e0ef)
(cherry picked from commit e87e6488335f4610b78469977a999851d96829b5)

---

Modified: src/modules/sms/libsms_getsms.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/e291a957634dc4ce30a2ea538364469104c37a2a.diff
Patch: 
https://github.com/kamailio/kamailio/commit/e291a957634dc4ce30a2ea538364469104c37a2a.patch

---

diff --git a/src/modules/sms/libsms_getsms.c b/src/modules/sms/libsms_getsms.c
index 1909c78bcc9..1a53ea0737e 100644
--- a/src/modules/sms/libsms_getsms.c
+++ b/src/modules/sms/libsms_getsms.c
@@ -432,6 +432,10 @@ static int splitpdu(struct modem *mdm, char *pdu, struct 
incame_sms *sms)
                start += 3;
                end = strstr(start, "\",");
                if(end != 0) {
+                       if(end - start >= SMS_NAME_LEN) {
+                               /* too long */
+                               return -1;
+                       }
                        memcpy(sms->name, start, end - start);
                        sms->name[end - start] = 0;
                } else {

_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!

Reply via email to