Matthew Jordan eb0d0eb4d1 Prevent crashes from occurring when reading from data sources with large values ...

When reading configuration data from an Asterisk .conf file or when pulling
data from an Asterisk RealTime backend, Asterisk was copying the data on the
stack for manipulation. Unfortunately, it is possible to read configuration
data or realtime data from some data source that provides a large blob of
characters. This could potentially cause a crash via a stack overflow.

This patch prevents large sets of data from being read from an ARA backend or
from an Asterisk conf file.

(issue ASTERISK-20658)
Reported by: wdoekes
Tested by: wdoekes, mmichelson
patches:
 * issueA20658_dont_process_overlong_config_lines.patch uploaded by wdoekes (license 5674)
 * issueA20658_func_realtime_limit.patch uploaded by wdoekes (license 5674)



git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@378375 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2013-01-02 21:48:57 +00:00

..

func_aes.c

Fix many issues from the NULL_RETURNS Coverity report

2012-05-04 22:12:55 +00:00

func_audiohookinherit.c

func_audiohookinherit: Document some missed sources.

2012-09-24 20:57:28 +00:00

func_base64.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_blacklist.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_callcompletion.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_callerid.c

Fixed typo from previous commit

2011-10-20 21:26:41 +00:00

func_cdr.c

Coverity Report: Fix issues for error type UNINIT in Core supported modules

2012-05-10 15:35:33 +00:00

func_channel.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

func_config.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_curl.c

Ensure that all ast_datastore_info structures are 'const'.

2012-07-18 17:10:36 +00:00

func_cut.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

func_db.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_devstate.c

Prevent exhaustion of system resources through exploitation of event cache

2013-01-02 16:54:20 +00:00

func_dialgroup.c

Fix a variety of memory leaks

2012-05-18 13:58:23 +00:00

func_dialplan.c

Enable macros in 1.8 to find the next highest "h" extension in a context, like in 1.4.

2012-03-13 07:44:23 +00:00

func_enum.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_env.c

Fix places where a negative return from ftello could be used as invalid input

2012-04-17 20:53:56 +00:00

func_extstate.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_frame_trace.c

Whitespace fix

2011-09-16 22:10:56 +00:00

func_global.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

func_groupcount.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_iconv.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_lock.c

Ensure that all ast_datastore_info structures are 'const'.

2012-07-18 17:10:36 +00:00

func_logic.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

func_math.c

Remove annoying unconditional debug message from INC/DEC functions.

2012-09-07 22:06:29 +00:00

func_md5.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_module.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_odbc.c

Fix misuses of asprintf throughout the code.

2012-08-21 20:35:12 +00:00

func_pitchshift.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_rand.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_realtime.c

Prevent crashes from occurring when reading from data sources with large values

2013-01-02 21:48:57 +00:00

func_sha1.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_shell.c

Improve documentation for the SHELL() dialplan function.

2012-07-23 21:09:26 +00:00

func_speex.c

Resolve FORWARD_NULL static analysis warnings

2012-05-10 20:50:47 +00:00

func_sprintf.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_srv.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_strings.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

func_sysinfo.c

Fix typo in svn:keywords

2012-04-06 16:27:30 +00:00

func_timeout.c

Fix ast_app_dtget() time unit inconsistency.

2012-01-21 00:20:07 +00:00

func_uri.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_version.c

Fix documentation for ${VERSION(ASTERISK_VERSION_NUM)}.

2012-04-19 21:58:01 +00:00

func_vmcount.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

func_volume.c

Minor spelling fix to the VOLUME documentation.

2012-11-30 17:04:34 +00:00

Makefile

Merged revisions 207647 via svnmerge from

2009-07-21 13:28:04 +00:00