Ticket #2017 (closed defect: fixed)

Opened 3 months ago

Last modified 3 months ago

Incorrect parsing of zero length multipart body parts

Reported by: ming Owned by: bennylp
Priority: normal Milestone: release-2.7
Component: pjsip Version: trunk
Keywords: Cc:
Backport to 1.x milestone: Backported: no

Description

The multi-part body parser in PJSIP contains a logical error that can make certain multi-part body parts attempt to read memory from outside the allowed boundaries. This can trigger invalid reads and potentially induce a crash.

Thanks to George Joseph and Asterisk team for the report.

Change History

comment:1 Changed 3 months ago by ming

  • Status changed from new to closed
  • Resolution set to fixed

In r5594:

Fixed #2017: Incorrect parsing of zero length multipart body parts

Last edited 3 months ago by ming (previous) (diff)
Note: See TracTickets for help on using tickets.