[SGSN] Some IEs in ATTACH REQUEST can be longer in 24.008

The original length checks were based on 04.08, but 24.008 allows
longer IEs.
This commit is contained in:
Harald Welte
2010-07-03 21:20:06 +02:00
parent 4b6ac1edb9
commit c48ac4750d

View File

@@ -626,7 +626,7 @@ static int gsm48_rx_gmm_att_req(struct sgsn_mm_ctx *ctx, struct msgb *msg,
/* MS network capability 10.5.5.12 */
msnc_len = *cur++;
msnc = cur;
if (msnc_len > 2)
if (msnc_len > 8)
goto err_inval;
cur += msnc_len;
@@ -657,6 +657,8 @@ static int gsm48_rx_gmm_att_req(struct sgsn_mm_ctx *ctx, struct msgb *msg,
/* MS Radio Access Capability 10.5.5.12a */
ms_ra_acc_cap_len = *cur++;
ms_ra_acc_cap = cur;
if (ms_ra_acc_cap_len > 51)
goto err_inval;
/* Optional: Old P-TMSI Signature, Requested READY timer, TMSI Status */