Opened 8 years ago

Closed 8 years ago

Last modified 8 years ago

#2017 closed defect (fixed)

Incorrect parsing of zero length multipart body parts

Reported by: ming Owned by: bennylp
Priority: normal Milestone: release-2.7
Component: pjsip Version: trunk
Keywords: Cc:
Backport to 1.x milestone: Backported: no

Description

The multi-part body parser in PJSIP contains a logical error that can make certain multi-part body parts attempt
to read memory from outside the allowed boundaries. This can trigger invalid reads and potentially induce a crash.

Thanks to George Joseph and Asterisk team for the report.

Change History (1)

comment:1 Changed 8 years ago by ming

  • Resolution set to fixed
  • Status changed from new to closed

In 5594:

Fixed #2017: Incorrect parsing of zero length multipart body parts

Version 0, edited 8 years ago by ming (next)
Note: See TracTickets for help on using tickets.