Ticket #2017 (closed defect: fixed)

Opened 5 weeks ago

Last modified 5 weeks ago

Incorrect parsing of zero length multipart body parts

Reported by: ming Owned by: bennylp
Priority: normal Milestone: release-2.7
Component: pjsip Version: trunk
Keywords: Cc:
Backport to 1.x milestone: Backported: no

Description

The multi-part body parser in PJSIP contains a logical error that can make certain multi-part body parts attempt to read memory from outside the allowed boundaries. This can trigger invalid reads and potentially induce a crash.

Thanks to George Joseph and Asterisk team for the report.

Change History

comment:1 Changed 5 weeks ago by ming

  • Status changed from new to closed
  • Resolution set to fixed

In r5594:

Fixed #2017: Incorrect parsing of zero length multipart body parts

Last edited 5 weeks ago by ming (previous) (diff)
Note: See TracTickets for help on using tickets.