Corey Farrell a3a42c0907 CDR: Protect from data overflow in ast_cdr_setuserfield. ...

ast_cdr_setuserfield wrote to a fixed length field using strcpy. This could
result in a buffer overrun when called from chan_sip or func_cdr. This patch
adds a maximum bytes written to the field by using ast_copy_string instead.

ASTERISK-26897 #close
patches:
  0001-CDR-Protect-from-data-overflow-in-ast_cdr_setuserfie.patch submitted
    by Corey Farrell (license #5909)

Change-Id: Ib23ca77e9b9e2803a450e1206af45df2d2fdf65c

2017-04-04 06:16:24 -05:00

..

editline

BuildSystem: Avoid 'ar cru' and use 'ar cr' instead.

2016-06-07 09:32:11 +02:00

stdtime

BuildSystem: Fix a few issues hightlighted by gcc 6.x

2016-06-28 12:40:49 -05:00

.gitignore

build-system: Allow building with static pjproject

2016-03-01 09:30:43 -07:00

abstract_jb.c

abstract/fixed/adpative jitter buffer: disallow frame re-inserts

2017-01-17 17:08:45 -06:00

acl.c

acl.c: Improve ast_ouraddrfor() diagnostic messages.

2016-12-22 12:24:03 -06:00

adsi.c

Allow Asterisk to compile under GCC 4.10

2014-05-09 22:49:26 +00:00

alaw.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

aoc.c

Merge "Audit ast_json_pack() calls for needed UTF-8 checks." into 14

2016-10-14 14:15:51 -05:00

app.c

main/app.c: Memory corruption from early format destruction.

2017-01-24 14:04:51 -06:00

ast_expr2.c

ast_expr2: Fix off-nominal memory leak.

2016-07-11 13:51:29 -05:00

ast_expr2.fl

Git Conversion: Switch Non-C files to ASTERISK_REGISTER_FILE.

2015-04-29 01:02:10 -04:00

ast_expr2.h

…

ast_expr2.y

ast_expr2: Fix off-nominal memory leak.

2016-07-11 13:51:29 -05:00

ast_expr2f.c

MALLOC_DEBUG: Replace WRAP_LIBC_MALLOC with ASTMM_LIBC.

2015-05-13 21:55:07 -04:00

asterisk.c

PJPROJECT logging: Fix detection of max supported log level.

2017-01-24 11:25:11 -06:00

asterisk.dynamics

Fix error loading res_monitor.

2014-04-23 15:02:39 +00:00

asterisk.exports.in

pjproject_bundled: Various fixes discovered during testing of OSes

2016-05-03 07:56:18 -05:00

astfd.c

astfd: With RLIMIT_NOFILE only the current value is sensible.

2016-06-10 10:13:20 +02:00

astmm.c

cli: Fix various CLI documentation and completion issues

2017-02-13 11:24:24 -05:00

astobj2_container_private.h

Astobj2: Allow reference debugging to be enabled/disabled by config.

2015-04-27 18:37:26 -04:00

astobj2_container.c

astobj2: Add backtrace to log_bad_ao2.

2016-10-06 16:20:02 -05:00

astobj2_hash.c

astobj2: Add backtrace to log_bad_ao2.

2016-10-06 16:20:02 -05:00

astobj2_private.h

Astobj2: Allow reference debugging to be enabled/disabled by config.

2015-04-27 18:37:26 -04:00

astobj2_rbtree.c

astobj2: Add backtrace to log_bad_ao2.

2016-10-06 16:20:02 -05:00

astobj2.c

astobj2.c: Add excessive ref count trap.

2017-01-24 14:15:03 -06:00

audiohook.c

audiohooks: Muting a hook can mute underlying frames

2017-02-01 17:56:24 -05:00

autochan.c

autochan/mixmonitor/chanspy: Fix unsafe channel locking and references.

2017-03-15 18:15:22 -05:00

autoservice.c

Frame deferral: Revert API refactoring.

2017-02-02 12:38:05 -06:00

backtrace.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

bridge_after.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

bridge_basic.c

ast_framehook_attach() must be called with the channel locked.

2016-08-25 17:11:17 -05:00

bridge_channel.c

main/bridge_channel: Fix channel reference leak on video source

2016-11-04 15:47:42 -05:00

bridge_roles.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

bridge.c

cli: Fix various CLI documentation and completion issues

2017-02-13 11:24:24 -05:00

bucket.c

media cache: Add a core API and facade for a backend agnostic media cache

2015-07-12 20:44:16 -05:00

buildinfo.c

…

callerid.c

SIP diversion: Fix REDIRECTING(reason) value inconsistencies.

2016-03-01 20:21:58 -06:00

ccss.c

cli: Fix various CLI documentation and completion issues

2017-02-13 11:24:24 -05:00

cdr.c

CDR: Protect from data overflow in ast_cdr_setuserfield.

2017-04-04 06:16:24 -05:00

cel.c

Audit ast_json_pack() calls for needed UTF-8 checks.

2016-10-13 18:12:16 -05:00

channel_internal_api.c

Frame deferral: Revert API refactoring.

2017-02-02 12:38:05 -06:00

channel.c

Merge "channel: Protect flags in ast_waitfor_nandfds operation." into 14

2017-02-14 13:51:59 -06:00

chanvars.c

Fix checks for allocation debugging.

2016-08-24 11:02:18 -05:00

cli.c

cli: Fix various CLI documentation and completion issues

2017-02-13 11:24:24 -05:00

codec_builtin.c

codec_opus: Fix warning when Opus negotiated but codec_opus not loaded.

2016-11-16 14:56:09 -05:00

codec.c

codecs: Fix ABI incompatibility created by adding format_name to ast_codec

2016-06-29 09:01:51 -05:00

config_options.c

Fix Alembic upgrades.

2016-06-22 12:23:44 -05:00

config.c

Fix checks for allocation debugging.

2016-08-24 11:02:18 -05:00

core_local.c

bridge.c: Crash during attended transfer when missing a local channel half

2016-03-03 14:03:14 -06:00

core_unreal.c

Bridge system: Fix memory leaks and double frees on impart failure.

2016-04-22 15:45:47 -05:00

crypt.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

cygload.c

…

data.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

datastore.c

datastore: Add common container based datastores API.

2016-05-09 10:40:28 -03:00

db.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

devicestate.c

devicestate: Cleanup engine thread during graceful shutdown.

2016-01-10 17:16:28 -06:00

dial.c

core/dial: New channel variable FORWARDERNAME

2016-06-04 11:07:22 -05:00

dns_core.c

Add support for older name resolving version libraries like openBSD

2016-11-19 17:32:15 -05:00

dns_naptr.c

Add support for older name resolving version libraries like openBSD

2016-11-19 17:32:15 -05:00

dns_query_set.c

DNS: Fix some corner cases.

2015-06-10 18:06:15 -05:00

dns_recurring.c

dns: Fix crash when invoking cancel in DNS recurring unit test.

2015-07-02 08:54:51 -03:00

dns_srv.c

Add support for older name resolving version libraries like openBSD

2016-11-19 17:32:15 -05:00

dns_system_resolver.c

dns: Change lookup failures from LOG_ERROR to debug 1.

2015-11-30 10:13:35 -07:00

dns_test.c

dns: Fix build when TEST_FRAMEWORK is not defined.

2015-04-10 13:32:24 +00:00

dns_tlsa.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

dns.c

Add support for older name resolving version libraries like openBSD

2016-11-19 17:32:15 -05:00

dnsmgr.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

dsp.c

dsp.c: Add fax and DTMF detection unit tests.

2016-07-27 11:03:19 -05:00

ecdisa.h

…

endpoints.c

endpoint/stasis: Eliminate duplicate events on endpoint status change

2015-12-28 11:39:26 -06:00

enum.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

event.c

Clang: change previous tautological-compare fixes.

2015-04-23 11:39:13 -05:00

features_config.c

Fix issue with CLI not returning to prompt after running "features show"

2016-10-20 06:48:22 -05:00

features.c

manager: Add <see-also> tags to relate Bridge related events,actions, and apps

2016-08-15 07:41:01 -05:00

file.c

file.c/__ast_file_read_dirs: Fix issues on filesystems without d_type

2016-11-15 21:21:28 -05:00

fixedjitterbuf.c

abstract/fixed/adpative jitter buffer: disallow frame re-inserts

2017-01-17 17:08:45 -06:00

fixedjitterbuf.h

abstract/fixed/adpative jitter buffer: disallow frame re-inserts

2017-01-17 17:08:45 -06:00

format_cache.c

Update support for SILK format.

2016-07-14 15:59:49 -05:00

format_cap.c

typo: s/paranthesis/parenthesis/ in a comment

2016-10-24 17:48:06 -05:00

format_compatibility.c

T.140: Fix format ref and memory leaks.

2017-01-25 13:46:34 -06:00

format.c

format: Register format-attribute module with cached formats.

2015-11-13 09:32:52 +01:00

frame.c

frame.c: Fix off-nominal format ref leaks.

2017-01-24 14:02:39 -06:00

framehook.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

fskmodem_float.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

fskmodem_int.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

fskmodem.c

…

global_datastores.c

Detect potential forwarding loops based on count.

2015-04-17 15:58:07 -05:00

hashtab.c

Fix checks for allocation debugging.

2016-08-24 11:02:18 -05:00

heap.c

Fix checks for allocation debugging.

2016-08-24 11:02:18 -05:00

http.c

thread safety: Don't use getprotobyname()

2017-03-20 06:52:14 -06:00

image.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

indications.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

io.c

sd_notify (systemd status notifications) support

2016-09-20 08:12:38 -06:00

jitterbuf.c

abstract/fixed/adpative jitter buffer: disallow frame re-inserts

2017-01-17 17:08:45 -06:00

json.c

res_ari: Add support for channel variables in ARI events.

2016-11-14 14:00:54 -05:00

libasteriskpj.c

PJPROJECT logging: Fix detection of max supported log level.

2017-01-24 11:25:11 -06:00

libasteriskssl.c

libasteriskssl: do nothing with OpenSSL >= 1.1

2017-02-14 23:22:19 +02:00

libasteriskssl.exports.in

…

loader.c

Fix shutdown crash caused by modules being left open.

2016-10-28 10:24:13 -05:00

lock.c

chan_sip: Address runaway when realtime peers subscribe to mailboxes

2016-09-23 07:53:23 -05:00

logger.c

logger: Prevent output of verbose messages initiated from rasterisk.

2016-10-09 22:28:52 -04:00

Makefile

build: Fix deb build issues with fakeroot

2017-03-30 17:10:24 -05:00

manager_bridges.c

res/ari/resource_bridges: Add the ability to manipulate the video source

2016-11-14 15:56:45 -06:00

manager_channels.c

manager: Add documentation for NewConnectedLine event.

2016-10-31 13:52:50 -05:00

manager_endpoints.c

res_pjsip: Add AMI events for chan_pjsip contact lifecycle changes

2015-05-26 16:47:55 -05:00

manager_mwi.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

manager_system.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

manager.c

thread safety: Don't use getprotobyname()

2017-03-20 06:52:14 -06:00

max_forwards.c

Detect potential forwarding loops based on count.

2015-04-17 15:58:07 -05:00

md5.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

media_cache.c

media_cache: Prefer ast_file_is_readable() over access()

2017-03-08 18:08:52 -05:00

media_index.c

media formats: re-architect handling of media for performance improvements

2014-07-20 22:06:33 +00:00

message.c

res_pjsip_messaging: Check URI type before dereferencing

2017-03-21 08:45:32 -06:00

mixmonitor.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

named_acl.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

named_locks.c

named_locks: Use ao2_weakproxy to deal with cleanup from container.

2016-09-02 10:28:01 -04:00

netsock2.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

netsock.c

netsock.c: fix includes for HURD

2016-11-01 12:37:22 -05:00

optional_api.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

parking.c

Modules: Make ast_module_info->self available to auxiliary sources.

2015-05-04 20:47:01 -04:00

pbx_app.c

cli: Fix various CLI documentation and completion issues

2017-02-13 11:24:24 -05:00

pbx_builtins.c

main/pbx: Move variable routines to pbx_variables.c.

2016-01-04 17:15:14 -05:00

pbx_functions.c

pbx.c: Allow dangerous functions when adding a hint to dialplan.

2016-07-28 15:11:20 -05:00

pbx_hangup_handler.c

cli: Fix various CLI documentation and completion issues

2017-02-13 11:24:24 -05:00

pbx_ignorepat.c

pbx: Create pbx_ignorepat.c for management of 'struct ast_ignorepat'.

2016-07-18 03:21:43 -04:00

pbx_include.c

pbx: Create pbx_include.c for management of 'struct ast_include'.

2016-07-15 05:34:29 -04:00

pbx_private.h

pbx: Create pbx_sw.c for management of 'struct ast_sw'.

2016-07-21 13:11:52 -05:00

pbx_sw.c

pbx: Create pbx_sw.c for management of 'struct ast_sw'.

2016-07-21 13:11:52 -05:00

pbx_switch.c

main/pbx: Move switch routines to pbx_switch.c.

2016-01-04 19:20:35 -05:00

pbx_timing.c

main/pbx: Move timing routines to pbx_timing.c.

2016-01-04 19:00:23 -05:00

pbx_variables.c

main/pbx: Move variable routines to pbx_variables.c.

2016-01-04 17:15:14 -05:00

pbx.c

pbx.c: Fix crash from malformed exten pattern.

2017-03-14 17:09:41 -06:00

pickup.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

plc.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

poll.c

…

presencestate.c

core: Ensure presencestate subtype and message are NULL.

2016-09-21 19:24:08 +00:00

privacy.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

rtp_engine.c

core: Cleanup some channel snapshot staging anomalies.

2017-02-10 12:05:48 -06:00

say.c

Saynumber is trying to get "and" from "digits/" subfolder

2017-03-06 15:59:31 -06:00

sched.c

sched.c: Ensure oldest expiring entry runs first.

2016-03-16 14:22:19 -05:00

sdp_srtp.c

res_srtp: Move SDP SRTP code from the core to res_srtp.

2016-08-10 17:32:42 -05:00

security_events.c

Clang: change previous tautological-compare fixes.

2015-04-23 11:39:13 -05:00

sem.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

sha1.c

…

sip_api.c

…

slinfactory.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

smoother.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

sorcery.c

sorcery: Create function ast_sorcery_lockable_alloc.

2016-09-02 10:28:05 -04:00

sounds_index.c

Replace most uses of ast_register_atexit with ast_register_cleanup.

2015-03-26 22:24:26 +00:00

srv.c

srv: Fix crash when ast_srv_lookup is used and 0 records are returned.

2017-02-07 12:13:16 -06:00

stasis_bridges.c

res/ari/resource_bridges: Add the ability to manipulate the video source

2016-11-14 15:56:45 -06:00

stasis_cache_pattern.c

endpoint/stasis: Eliminate duplicate events on endpoint status change

2015-12-28 11:39:26 -06:00

stasis_cache.c

main/stasis_cache: Demote the ERROR message when removing a nonexistent item

2017-03-14 08:40:43 -06:00

stasis_channels.c

res_ari: fix memory leak for channelvars

2017-02-03 16:42:33 -05:00

stasis_endpoints.c

stasis_endpoint.c: Fix contactstatus_to_json().

2016-07-13 15:12:19 -05:00

stasis_message_router.c

stasis: Add setting subscription congestion levels.

2016-06-09 10:32:07 -05:00

stasis_message.c

Manager: Short circuit AMI message processing.

2016-04-22 15:45:47 -05:00

stasis_system.c

res/res_corosync: Raise a Stasis message on node join/leave events

2016-07-13 09:11:37 -05:00

stasis.c

manager: Add <see-also> tags to relate UserEvent actions/apps/events

2016-08-15 07:40:31 -05:00

strcompat.c

…

stringfields.c

stringfields: Update extended string fields for master only.

2016-04-13 14:01:37 -06:00

strings.c

ari: Implement 'debug all' and request/response logging

2017-01-23 10:23:23 -07:00

stun.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

syslog.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

taskprocessor.c

taskprocessor.c: Change when high water warning logged.

2017-01-13 21:36:05 -06:00

tcptls.c

tcptls.c: Add some missing allocation failure checks.

2017-02-17 17:12:06 -06:00

tdd.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

term.c

main: Slight refactor of main. Improve color situation.

2015-11-25 20:29:55 +01:00

test.c

test.c: Add unit test registration checks for summary and description.

2015-06-24 17:13:31 -05:00

threadpool.c

threadpool: Fix leak in ast_threadpool_serializer_group error path.

2016-07-13 11:47:56 -05:00

threadstorage.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

timing.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

translate.c

translate: explicit format destination not properly set

2016-07-13 17:45:27 -05:00

udptl.c

udptl: Don't eat sequence numbers until OK is received

2016-05-18 14:06:09 -05:00

ulaw.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

uri.c

uri: Quiet warning about type qualifiers ignored on function return type

2014-08-21 14:42:12 +00:00

utils.c

ast_careful_fwrite to support EPIPE gracefully

2017-01-26 21:08:54 -06:00

uuid.c

Fix printf problems with high ascii characters after r413586 (1.8).

2014-12-17 10:23:32 +00:00

xml.c

git migration: Refactor the ASTERISK_FILE_VERSION macro

2015-04-13 03:48:57 -04:00

xmldoc.c

xmldoc: Improve xmldoc wrapping of 'core show ...' output.

2015-11-06 08:46:24 -05:00