osmo-mgw

mirror of https://gitea.osmocom.org/cellular-infrastructure/osmo-mgw.git synced 2025-11-02 13:03:33 +00:00

Go to file

Daniel Willmann 1fc8ec66a3 smpp_smsc: Fix integer overflow in read return value and msgb_alloc()

The size parameter of msgb_alloc is uint16_t so any length value above
65535 will allocate a msgb with incorrect size.

This patch changes the type of rdlen and rc to ssize_t (the return value
of read) and guards against the read length being larger than
UINT16_MAX.

To reproduce the issue run:
echo -en "\x00\x01\x00\x01\x01" |socat stdin tcp:localhost:2775

2014-03-06 23:20:30 +01:00

debian

debian: Enable hardening for the OpenBSC packages

2013-12-12 13:08:26 +01:00

hlrsync

hlrsync: Sync SMS from the web db to the hlr.

2009-08-14 21:33:34 +02:00

linux-kernel

new kernel patch for multiple virtual interfaces

2009-08-10 23:36:53 +02:00

openbsc

smpp_smsc: Fix integer overflow in read return value and msgb_alloc()