kenmirrors/freeswitch
1
0
Fork 0
mirror of https://github.com/signalwire/freeswitch.git synced 2025-07-22 20:04:52 +00:00
Code Issues Projects Releases Wiki Activity

FS-7184: add buffer overflow check in udptl_rx_packet

Browse Source
This commit is contained in:
Michael Jerris 2015-05-11 19:46:27 -05:00 committed by Brian West
parent 8ce7f24b41
commit dbc550a26d
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/mod/applications/mod_spandsp/udptl.c
View File

@ -223,6 +223,9 @@ int udptl_rx_packet(udptl_state_t *s, const uint8_t buf[], int len)
if ((stat = decode_length(buf, len, &ptr, &count)) < 0) if ((stat = decode_length(buf, len, &ptr, &count)) < 0)
return -1; return -1;
for (i = 0; i < count; i++) { for (i = 0; i < count; i++) {
if (total_count + i >= 16) {
return -1;
}
if (decode_open_type(buf, len, &ptr, &bufs[total_count + i], &lengths[total_count + i]) != 0) if (decode_open_type(buf, len, &ptr, &bufs[total_count + i], &lengths[total_count + i]) != 0)
return -1; return -1;
} }