Mark Michelson e1e05ad198 Fix potential buffer overflow that could happen if more than 100 announce files ...

were specified when calling ParkAndAnnounce. This overflow is not exploitable remotely
and so there is no need for a security advisory.

(closes issue #12386)
Reported by: davidw



git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.4@113507 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2008-04-08 19:07:38 +00:00

..

app_adsiprog.c

add some inter-module dependencies

2007-02-09 23:51:41 +00:00

app_alarmreceiver.c

Put in missing \ns on the end of ast_logs (issue #7936 reported by wojtekka)

2006-09-28 18:05:43 +00:00

app_amd.c

From bugtracker: "fix totalAnalysisTime to handle periods of no channel activity"

2008-02-01 00:06:37 +00:00

app_authenticate.c

Remove a needless (and incorrect) call to feof() after fgets().

2008-02-01 17:41:40 +00:00

app_cdr.c

Finished up a previous fix to overcome a compiler warning; the app NoCDR() has been updated to mark the channel CDR as POST_DISABLED instead of destroying the CDR; this way its flags are propagated thru a bridge and the CDR is actually dropped. The cases where only one channel in a bridge has a CDR was cleaned up.

2007-04-10 05:18:26 +00:00

app_chanisavail.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_channelredirect.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_chanspy.c

Add a missing unlock in the case that memory allocation fails in app_chanspy.

2008-03-19 20:33:03 +00:00

app_controlplayback.c

Make sure res is a positive value before performing the check to determine whether the user stopped it or not.

2007-10-22 16:15:18 +00:00

app_db.c

Fix a couple of typos. Initially pointed out by mrobinson.

2006-11-16 23:19:46 +00:00

app_dial.c

Move where unanswered CDRs are dropped to the CDR core, not everything uses app_dial.

2008-03-10 14:33:02 +00:00

app_dictate.c

Merged revisions 68526 via svnmerge from

2007-06-08 22:23:22 +00:00

app_directed_pickup.c

Include macroexten while searching for a channel to pick up in case they are in a macro. (issue #9491 reported by jamesb63)

2007-06-06 13:16:34 +00:00

app_directory.c

Reconnection doesn't happen automatically when a DB goes down (fixes issue #9389)

2007-08-07 19:09:38 +00:00

app_disa.c

If # is pressed after dialing an extension in DISA, stop trying to collect more digits.

2007-09-20 17:09:14 +00:00

app_dumpchan.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_echo.c

Much simpler than previous one ;-)

2007-02-10 09:08:55 +00:00

app_exec.c

Fix a minor spelling error.

2008-03-11 17:32:17 +00:00

app_externalivr.c

Fixing a typo.

2008-01-23 20:25:00 +00:00

app_festival.c

Ensure that frames are fully initialized. This will probably fix getting

2007-05-24 15:04:14 +00:00

app_flash.c

Change the description of app_flash to note how it can be a useful tool instead

2007-09-19 00:19:49 +00:00

app_followme.c

Fix a couple uses of sprintf. The second one could actually cause an overflow

2008-03-13 20:26:28 +00:00

app_forkcdr.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_getcpeid.c

apparently developers are still not aware that they should be use ast_copy_string instead of strncpy... fix up many more users, and fix some bugs in the process

2006-10-25 14:32:08 +00:00

app_hasnewvoicemail.c

Check to make sure a value has been given to the VMCOUNT dialplan function.

2007-10-16 14:52:22 +00:00

app_ices.c

Merged revisions 48374 via svnmerge from

2006-12-11 00:47:21 +00:00

app_image.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_ivrdemo.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_lookupblacklist.c

Picky, picky... show deprecation warning in application help, too (reported via list)

2007-02-26 22:01:23 +00:00

app_lookupcidname.c

Picky, picky... show deprecation warning in application help, too (reported via list)

2007-02-26 22:01:23 +00:00

app_macro.c

app_macro only needs a rdlock on the contexts list.

2008-01-02 22:00:21 +00:00

app_meetme.c

Fix a bug where when calls on the trunk side hang up while on hold, the state

2008-03-19 22:57:59 +00:00

app_milliwatt.c

Merge team/russell/frame_caching

2006-08-29 20:50:36 +00:00

app_mixmonitor.c

Add a trigger mode that triggers on both read and write. The actual function that returns the combined audio frame though will wait until both sides have fed in audio, or until one side stops (such as the case when you call Wait).

2008-03-12 18:26:37 +00:00

app_morsecode.c

Allow app_morsecode to build on PPC Linux by putting the value of the digit char in an int.

2007-07-23 17:48:51 +00:00

app_mp3.c

Merged revisions 48374 via svnmerge from

2006-12-11 00:47:21 +00:00

app_nbscat.c

Merged revisions 48374 via svnmerge from

2006-12-11 00:47:21 +00:00

app_osplookup.c

Fixed OSP module did not report source/devinfo IP in correct format.

2007-10-19 01:45:53 +00:00

app_page.c

List app_meetme as a module that app_page depends on.

2007-06-01 19:35:13 +00:00

app_parkandannounce.c

Fix potential buffer overflow that could happen if more than 100 announce files

2008-04-08 19:07:38 +00:00

app_playback.c

These small documentation updates made in response to a query in

2008-03-27 13:03:28 +00:00

app_privacy.c

Constify the result of a config retrieval function, to avoid mutilation (issue 7983).

2006-09-20 20:40:39 +00:00

app_queue.c

Ensure that there is no timeout if none is specified.

2008-04-02 14:32:00 +00:00

app_random.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_read.c

Minor cleanup and make sure the tmp variable is clean

2006-09-07 18:54:36 +00:00

app_readfile.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_realtime.c

merge qwell's CLI verbification work

2006-09-18 19:54:18 +00:00

app_record.c

Update app_record documentation to use new CLI command, core show file formats. (issue #9151 reported by junky)

2007-02-26 19:33:48 +00:00

app_rpt.c

backport a fix from trunk

2008-03-11 15:18:45 +00:00

app_sayunixtime.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_senddtmf.c

we can't unlock a channel if we cant find it. - AnthonyL bug #8741

2007-01-08 21:11:16 +00:00

app_sendtext.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_setcallerid.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_setcdruserfield.c

Expand deprecation warnings from simply warning on use to the builtin documentation.

2007-03-15 23:11:33 +00:00

app_settransfercapability.c

Expand deprecation warnings from simply warning on use to the builtin documentation.

2007-03-15 23:11:33 +00:00

app_skel.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_sms.c

stop checking for mktime() in the configure script... we don't use it, and the test is buggy under gcc 4.3

2008-03-11 14:33:45 +00:00

app_softhangup.c

apparently developers are still not aware that they should be use ast_copy_string instead of strncpy... fix up many more users, and fix some bugs in the process

2006-10-25 14:32:08 +00:00

app_speech_utils.c

Safely use the strncat() function.

2008-03-07 06:36:33 +00:00

app_stack.c

Don't execute a gosub if the arguments is zero-len (not just NULL)

2007-10-15 20:29:35 +00:00

app_system.c

The System() and TrySystem() applications can take a substantial amount of

2007-09-19 19:50:48 +00:00

app_talkdetect.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_test.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_transfer.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_url.c

Fix documentation to reflect how Url() really works

2006-09-21 20:22:43 +00:00

app_userevent.c

Remove an extra \r\n from manager user events. (issue #8955, mnicholson)

2007-01-31 18:18:25 +00:00

app_verbose.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_voicemail.c

Fix a silly infinite loop when choosing an invalid option.

2008-03-31 21:48:05 +00:00

app_waitforring.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_waitforsilence.c

Changes/fixes to the app_waitforsilence app to make it behave more the way the author originally intended for it

2006-09-03 20:23:41 +00:00

app_while.c

Merged revisions 51828 via svnmerge from

2007-01-24 00:19:55 +00:00

app_zapateller.c

An empty string is an empty callerid ... so zap it. This closes issue #10502, which was pointed out by dswartz. Thank you, and may the swartz be with you

2007-08-24 22:59:52 +00:00

app_zapbarge.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

app_zapras.c

Merged revisions 48374 via svnmerge from

2006-12-11 00:47:21 +00:00

app_zapscan.c

merge new_loader_completion branch, including (at least):

2006-08-21 02:11:39 +00:00

enter.h

remove extraneous svn:executable properties

2005-11-29 18:24:39 +00:00

leave.h

remove extraneous svn:executable properties

2005-11-29 18:24:39 +00:00

Makefile

In http://lists.digium.com/pipermail/asterisk-dev/2007-December/031145.html,

2007-12-17 06:44:51 +00:00

rpt_flow.pdf

remove extraneous svn:executable properties

2005-11-29 18:24:39 +00:00