Pengpeng Hou af50dc4a70 app_sms: Bound protocol 1 SMS unpacking to fixed-size buffers ...

The protocol 1 unpack helpers trusted externally controlled lengths and wrote
 them directly into fixed-size buffers in sms_t. Clamp the address, header,
 and body copies to the destination array sizes so malformed messages cannot
 overwrite adjacent state.

Resolves: #GHSA-q9fr-m7g8-6ph5

2026-06-25 08:23:14 -06:00

..

confbridge

app_confbridge: Don't emit warnings on valid configurations.

2024-01-23 16:36:13 +00:00

app_adsiprog.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_agent_pool.c

manager: Add <since> tags for all AMI actions.

2025-01-13 17:08:49 +00:00

app_alarmreceiver.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_amd.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_attended_transfer.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_audiosocket.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_authenticate.c

app.c: Allow ampersands in playback lists to be escaped.

2023-11-28 19:51:57 +00:00

app_blind_transfer.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_bridgeaddchan.c

app_bridgeaddchan.c: Make BridgeAdd be more like Bridge

2020-01-05 21:32:01 -06:00

app_bridgewait.c

app_bridgewait: Add option to not answer channel.

2022-09-26 10:41:46 -05:00

app_broadcast.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_cdr.c

various files - fix some alerts raised by lgtm code analysis

2019-11-18 08:30:45 -06:00

app_celgenuserevent.c

…

app_chanisavail.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_channelredirect.c

…

app_chanspy.c

app_chanspy: Add 'D' option for dual-channel audio

2024-02-06 17:21:15 +00:00

app_confbridge.c

manager: Add <since> tags for all AMI actions.

2025-01-13 17:08:49 +00:00

app_controlplayback.c

manager: Add <since> tags for all AMI actions.

2025-01-13 17:08:49 +00:00

app_db.c

…

app_dial.c

app_dial: Add dial time for progress/ringing.

2024-03-06 14:26:15 +00:00

app_dictate.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_directed_pickup.c

…

app_directory.c

app_directory: Add ADSI support to Directory.

2023-11-02 21:38:41 +00:00

app_disa.c

pbx: Add helper function to execute applications.

2022-06-30 15:19:56 -05:00

app_dtmfstore.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_dumpchan.c

…

app_echo.c

…

app_exec.c

…

app_externalivr.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_festival.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_flash.c

…

app_followme.c

app_followme.c: Grab reference on nativeformats before using it

2023-11-09 18:24:31 +00:00

app_forkcdr.c

apps: Spelling fixes

2021-11-16 05:38:29 -06:00

app_getcpeid.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_if.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_ivrdemo.c

…

app_jack.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_macro.c

app_macro: Fix locking around datastore access

2023-08-22 13:29:51 +00:00

app_meetme.c

manager: Add <since> tags for all AMI actions.

2025-01-13 17:08:49 +00:00

app_mf.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_milliwatt.c

app_milliwatt: Timing fix

2021-08-19 11:18:30 -05:00

app_minivm.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_mixmonitor.c

manager: Add <since> tags for all AMI actions.

2025-01-13 17:08:49 +00:00

app_morsecode.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_mp3.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_originate.c

app_originate: Add ability to set codecs

2021-08-19 09:08:58 -05:00

app_osplookup.c

policy: Deprecate modules and add versions to others.

2021-08-11 08:14:51 -05:00

app_page.c

apps: Fix for Doxygen.

2021-11-18 10:37:56 -06:00

app_playback.c

build: Fix GCC discarded-qualifiers const errors.

2026-02-18 15:43:30 +00:00

app_playtones.c

…

app_privacy.c

…

app_queue.c

manager: Add <since> tags for all AMI actions.

2025-01-13 17:08:49 +00:00

app_read.c

app.c: Allow ampersands in playback lists to be escaped.

2023-11-28 19:51:57 +00:00

app_readexten.c

various files - fix some alerts raised by lgtm code analysis

2019-11-18 08:30:45 -06:00

app_record.c

build: Fix GCC discarded-qualifiers const errors.

2026-02-18 15:43:30 +00:00

app_reload.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_saycounted.c

…

app_sayunixtime.c

…

app_senddtmf.c

manager: Add <since> tags for all AMI actions.

2025-01-13 17:08:49 +00:00

app_sendtext.c

app_sendtext: Remove references to removed applications.

2022-12-20 08:19:37 -06:00

app_sf.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_signal.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_skel.c

general: Fix broken links.

2023-12-08 13:11:48 +00:00

app_sms.c

app_sms: Bound protocol 1 SMS unpacking to fixed-size buffers

2026-06-25 08:23:14 -06:00

app_softhangup.c

app_softhangup.c: Reduce unnecessary warning to verbose message.

2020-01-05 21:09:03 -06:00

app_speech_utils.c

app_speech_utils.c: Allow partial speech results.

2024-02-06 18:56:24 +00:00

app_stack.c

documentation: Update Gosub, Goto, and add new documentationtype.

2025-03-19 16:50:46 +00:00

app_stasis.c

progdocs: Fix for Doxygen, the hidden parts.

2021-12-02 10:37:38 -06:00

app_statsd.c

apps: Spelling fixes

2021-11-16 05:38:29 -06:00

app_stream_echo.c

app_stream_echo: Fix state of added streams.

2020-06-19 09:15:44 -05:00

app_system.c

…

app_talkdetect.c

documentation: Fix non-matching module support levels.

2021-03-16 10:26:16 -05:00

app_test.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_transfer.c

chan_pjsip, app_transfer: Add TRANSFERSTATUSPROTOCOL variable

2021-01-27 11:42:42 -06:00

app_userevent.c

…

app_verbose.c

logger: Add custom logging capabilities

2021-09-21 12:10:21 -05:00

app_voicemail_imap.c

app_voicemail.c: Build all three variants for app_voicemail at the same time

2019-06-28 07:32:03 -06:00

app_voicemail_imap.exports.in

app_voicemail.c: Build all three variants for app_voicemail at the same time

2019-06-28 07:32:03 -06:00

app_voicemail_odbc.c

app_voicemail.c: Build all three variants for app_voicemail at the same time

2019-06-28 07:32:03 -06:00

app_voicemail_odbc.exports.in

app_voicemail.c: Build all three variants for app_voicemail at the same time

2019-06-28 07:32:03 -06:00

app_voicemail.c

build: Fix GCC discarded-qualifiers const errors.

2026-02-18 15:43:30 +00:00

app_voicemail.exports.in

…

app_waitforcond.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_waitforring.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_waitforsilence.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

app_waituntil.c

…

app_while.c

…

app_zapateller.c

Initial commit for certified-20.7

2024-03-18 08:20:06 -06:00

enter.h

…

leave.h

…

Makefile

app_voicemail.c: Build all three variants for app_voicemail at the same time

2019-06-28 07:32:03 -06:00