diff options
| author | Sebastian Kemper <sebastian_ml@gmx.net> | 2022-03-05 16:58:00 +0100 |
|---|---|---|
| committer | Sebastian Kemper <sebastian_ml@gmx.net> | 2022-03-06 12:18:39 +0100 |
| commit | ab9fc722ae449ea54d37ea7131e97b3b97a34f2a (patch) | |
| tree | dfdbca28c831c79556a56d9f88147f757024c317 /libs/pjproject/patches/0170-stun-integer-underflow.patch | |
| parent | 4bff07ae2eddea44adf745b9a8e4222d2fad75d6 (diff) | |
pjproject: add upstream security fixes
Details:
https://downloads.asterisk.org/pub/security/AST-2022-004.html
https://downloads.asterisk.org/pub/security/AST-2022-005.html
https://downloads.asterisk.org/pub/security/AST-2022-006.html
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry picked from commit 623e5288f16baa64472eefbbd215aacb0f99e79f)
Diffstat (limited to 'libs/pjproject/patches/0170-stun-integer-underflow.patch')
| -rw-r--r-- | libs/pjproject/patches/0170-stun-integer-underflow.patch | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/libs/pjproject/patches/0170-stun-integer-underflow.patch b/libs/pjproject/patches/0170-stun-integer-underflow.patch new file mode 100644 index 0000000..519dc81 --- /dev/null +++ b/libs/pjproject/patches/0170-stun-integer-underflow.patch @@ -0,0 +1,21 @@ +From 15663e3f37091069b8c98a7fce680dc04bc8e865 Mon Sep 17 00:00:00 2001 +From: sauwming <ming@teluu.com> +Date: Tue, 10 Aug 2021 11:53:25 +0800 +Subject: [PATCH] Merge pull request from GHSA-2qpg-f6wf-w984 + +--- + pjnath/src/pjnath/stun_msg.c | 3 +++ + 1 file changed, 3 insertions(+) + +--- a/pjnath/src/pjnath/stun_msg.c ++++ b/pjnath/src/pjnath/stun_msg.c +@@ -1763,6 +1763,9 @@ static pj_status_t decode_errcode_attr(p + /* Get pointer to the string in the message */ + value.ptr = ((char*)buf + ATTR_HDR_LEN + 4); + value.slen = attr->hdr.length - 4; ++ /* Make sure the length is never negative */ ++ if (value.slen < 0) ++ value.slen = 0; + + /* Copy the string to the attribute */ + pj_strdup(pool, &attr->reason, &value); |