October 2026 - gerrit-log - lists.osmocom.org

[XS] Change in osmo-ttcn3-hacks[master]: library/AbisOML_Types: tr_OML_MsgType: fix uninitialized 'len' field
by fixeria 22 Oct '26

22 Oct '26

fixeria has uploaded this change for review. ( https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/43959?usp=email ) Change subject: library/AbisOML_Types: tr_OML_MsgType: fix uninitialized 'len' field ...................................................................... library/AbisOML_Types: tr_OML_MsgType: fix uninitialized 'len' field This was caught while running BTS_Tests_OML with TITAN 11.2.1: BTS_Tests_OML.ttcn:348 Dynamic test case error: Matching with an uninitialized/unsupported integer template. Change-Id: Ie9e26a73faeb17bc68b439e13ee9d7dcd4abd2f0 Fixes: OS#7108 --- M library/AbisOML_Types.ttcn 1 file changed, 1 insertion(+), 0 deletions(-) git pull ssh://gerrit.osmocom.org:29418/osmo-ttcn3-hacks refs/changes/59/43959/1 diff --git a/library/AbisOML_Types.ttcn b/library/AbisOML_Types.ttcn index 99ad252..0f7dfe2 100644 --- a/library/AbisOML_Types.ttcn +++ b/library/AbisOML_Types.ttcn @@ -790,6 +790,7 @@ modifies tr_OML_FOM_only := { u := { fom := { + len := ?, hdr := { msg_type := msg_type, obj_class := obj_class, -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/43959?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: Ie9e26a73faeb17bc68b439e13ee9d7dcd4abd2f0 Gerrit-Change-Number: 43959 Gerrit-PatchSet: 1 Gerrit-Owner: fixeria <vyanitskiy(a)sysmocom.de>

1 0

[XS] Change in osmo-sgsn[master]: gprs_sndcp_xid: use reasonable static buffer size
by fixeria 22 Oct '26

22 Oct '26

Attention is currently required from: dexter, lynxis lazus. fixeria has posted comments on this change by dexter. ( https://gerrit.osmocom.org/c/osmo-sgsn/+/43957?usp=email ) Change subject: gprs_sndcp_xid: use reasonable static buffer size ...................................................................... Patch Set 1: Code-Review+1 -- To view, visit https://gerrit.osmocom.org/c/osmo-sgsn/+/43957?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-sgsn Gerrit-Branch: master Gerrit-Change-Id: If348e15a98fd6d28a1de08df57983bb710001d73 Gerrit-Change-Number: 43957 Gerrit-PatchSet: 1 Gerrit-Owner: dexter <pmaier(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Attention: dexter <pmaier(a)sysmocom.de> Gerrit-Comment-Date: Thu, 22 Oct 2026 14:05:56 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

1 0

[S] Change in osmo-sgsn[master]: gprs_sndcp_xid: fix length check in gprs_sndcp_compile_xid
by fixeria 22 Oct '26

22 Oct '26

Attention is currently required from: dexter, lynxis lazus. fixeria has posted comments on this change by dexter. ( https://gerrit.osmocom.org/c/osmo-sgsn/+/43953?usp=email ) Change subject: gprs_sndcp_xid: fix length check in gprs_sndcp_compile_xid ...................................................................... Patch Set 2: Code-Review+1 (1 comment) File src/sgsn/gprs_sndcp_xid.c: https://gerrit.osmocom.org/c/osmo-sgsn/+/43953/comment/c0341b85_2a815718?us… : PS1, Line 596: VTVLV_GAN_GROSS_LEN > I was a bit of track here, it's of course TVLV_GROSS_LEN, we also cannot […] Done -- To view, visit https://gerrit.osmocom.org/c/osmo-sgsn/+/43953?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-sgsn Gerrit-Branch: master Gerrit-Change-Id: I977946a036f96d4dee2656bef048e2618198db40 Gerrit-Change-Number: 43953 Gerrit-PatchSet: 2 Gerrit-Owner: dexter <pmaier(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Attention: dexter <pmaier(a)sysmocom.de> Gerrit-Comment-Date: Thu, 22 Oct 2026 13:58:22 +0000 Gerrit-HasComments: Yes Gerrit-Has-Labels: Yes Comment-In-Reply-To: fixeria <vyanitskiy(a)sysmocom.de> Comment-In-Reply-To: dexter <pmaier(a)sysmocom.de>

1 0

[XS] Change in osmo-sgsn[master]: gprs_sndcp_xid: use reasonable static buffer size
by dexter 22 Oct '26

22 Oct '26

dexter has uploaded this change for review. ( https://gerrit.osmocom.org/c/osmo-sgsn/+/43957?usp=email ) Change subject: gprs_sndcp_xid: use reasonable static buffer size ...................................................................... gprs_sndcp_xid: use reasonable static buffer size the output of gprs_sndcp_compile_xid is a buffer with TLV objects. Each TLV object is generated into an internal buffer (comp_bytes) before it is added to the output buffer using tlv_put. Since we are using a TLV structure here, the fields cannot exceed a length of 255. Using a buffer size of 512 is misleading. Related: OS#7095 Change-Id: If348e15a98fd6d28a1de08df57983bb710001d73 --- M src/sgsn/gprs_sndcp_xid.c 1 file changed, 1 insertion(+), 1 deletion(-) git pull ssh://gerrit.osmocom.org:29418/osmo-sgsn refs/changes/57/43957/1 diff --git a/src/sgsn/gprs_sndcp_xid.c b/src/sgsn/gprs_sndcp_xid.c index 0b981b5..834d98a 100644 --- a/src/sgsn/gprs_sndcp_xid.c +++ b/src/sgsn/gprs_sndcp_xid.c @@ -566,7 +566,7 @@ { int rc; int byte_counter = 0; - uint8_t comp_bytes[512]; + uint8_t comp_bytes[256]; uint8_t xid_version_number[1]; OSMO_ASSERT(comp_fields); -- To view, visit https://gerrit.osmocom.org/c/osmo-sgsn/+/43957?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: osmo-sgsn Gerrit-Branch: master Gerrit-Change-Id: If348e15a98fd6d28a1de08df57983bb710001d73 Gerrit-Change-Number: 43957 Gerrit-PatchSet: 1 Gerrit-Owner: dexter <pmaier(a)sysmocom.de>

1 0

[S] Change in osmo-sgsn[master]: gprs_sndcp_xid: fix length check in gprs_sndcp_compile_xid
by dexter 22 Oct '26

22 Oct '26

Attention is currently required from: fixeria, lynxis lazus. dexter has posted comments on this change by dexter. ( https://gerrit.osmocom.org/c/osmo-sgsn/+/43953?usp=email ) Change subject: gprs_sndcp_xid: fix length check in gprs_sndcp_compile_xid ...................................................................... Patch Set 2: (2 comments) File src/sgsn/gprs_sndcp_xid.c: https://gerrit.osmocom.org/c/osmo-sgsn/+/43953/comment/373d8ed1_168d20ce?us… : PS1, Line 596: VTVLV_GAN_GROSS_LEN > Any reason to use GAN specific macros here? Why not plain `TLV_GROSS_LEN`? I was a bit of track here, it's of course TVLV_GROSS_LEN, we also cannot have comp_bytes results larger than 255 bytes then. The buffer size of 512 is a bit misleading here. I was assuming that we have length fields with variable length here, but we don't... https://gerrit.osmocom.org/c/osmo-sgsn/+/43953/comment/c2028603_f46e05ad?us… : PS1, Line 609: SNDCP_XID_DATA_COMPRESSION > ```suggestion […] Done -- To view, visit https://gerrit.osmocom.org/c/osmo-sgsn/+/43953?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-sgsn Gerrit-Branch: master Gerrit-Change-Id: I977946a036f96d4dee2656bef048e2618198db40 Gerrit-Change-Number: 43953 Gerrit-PatchSet: 2 Gerrit-Owner: dexter <pmaier(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: lynxis lazus <lynxis(a)fe80.eu> Gerrit-CC: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Comment-Date: Thu, 22 Oct 2026 13:56:17 +0000 Gerrit-HasComments: Yes Gerrit-Has-Labels: No Comment-In-Reply-To: fixeria <vyanitskiy(a)sysmocom.de>

1 0

[S] Change in osmo-sgsn[master]: gprs_sndcp_xid: fix length check in gprs_sndcp_compile_xid
by dexter 22 Oct '26

22 Oct '26

Attention is currently required from: fixeria, lynxis lazus. Hello Jenkins Builder, lynxis lazus, I'd like you to reexamine a change. Please visit https://gerrit.osmocom.org/c/osmo-sgsn/+/43953?usp=email to look at the new patch set (#2). The following approvals got outdated and were removed: Verified+1 by Jenkins Builder Change subject: gprs_sndcp_xid: fix length check in gprs_sndcp_compile_xid ...................................................................... gprs_sndcp_xid: fix length check in gprs_sndcp_compile_xid The function gprs_sndcp_compile_xid gets an output buffer (dst) and a length (dst_maxlen), but unfortunately, the length is not checked before data is written to the output buffer (tlv_put). The problem was reported by osmocom.org user tsato (see related ticket) Related: OS#7095 Change-Id: I977946a036f96d4dee2656bef048e2618198db40 --- M src/sgsn/gprs_sndcp_xid.c M tests/sndcp_xid/sndcp_xid_test.c M tests/sndcp_xid/sndcp_xid_test.ok 3 files changed, 41 insertions(+), 2 deletions(-) git pull ssh://gerrit.osmocom.org:29418/osmo-sgsn refs/changes/53/43953/2 -- To view, visit https://gerrit.osmocom.org/c/osmo-sgsn/+/43953?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newpatchset Gerrit-Project: osmo-sgsn Gerrit-Branch: master Gerrit-Change-Id: I977946a036f96d4dee2656bef048e2618198db40 Gerrit-Change-Number: 43953 Gerrit-PatchSet: 2 Gerrit-Owner: dexter <pmaier(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: lynxis lazus <lynxis(a)fe80.eu> Gerrit-CC: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu>

1 0

[M] Change in osmo-sgsn[master]: gprs_sndcp_xid: replace OSMO_ASSERT with if and return
by dexter 22 Oct '26

22 Oct '26

dexter has uploaded this change for review. ( https://gerrit.osmocom.org/c/osmo-sgsn/+/43958?usp=email ) Change subject: gprs_sndcp_xid: replace OSMO_ASSERT with if and return ...................................................................... gprs_sndcp_xid: replace OSMO_ASSERT with if and return The code around the function gprs_sndcp_compile_xid was written under the assumption that the caller always supplies correct input parameters because the caller has 100% control over the input. However, this is a high standard and depending on how the input is obtained errors may happen. In case of an error, the whole process will crash due to the usage of OSMO_ASSERT. When looking at the callers of gprs_sndcp_compile_xid, we can see that they already check the return code. Also the return type of gprs_sndcp_compile_xid is already int. We also do not have any dynamically allocated memory. There is nothing that would speak against returning a negative error code. Let's replace each occurrence of OSMO_ASSERT with an if and return an error code to the caller, so that the caller can handle the problem gracefully. Related: OS#7095 Change-Id: Ia570b27a3670fed3aeb4779840292c5d216a1102 --- M src/sgsn/gprs_sndcp_xid.c 1 file changed, 142 insertions(+), 77 deletions(-) git pull ssh://gerrit.osmocom.org:29418/osmo-sgsn refs/changes/58/43958/1 diff --git a/src/sgsn/gprs_sndcp_xid.c b/src/sgsn/gprs_sndcp_xid.c index 834d98a..64d8acf 100644 --- a/src/sgsn/gprs_sndcp_xid.c +++ b/src/sgsn/gprs_sndcp_xid.c @@ -49,20 +49,24 @@ /* FUNCTIONS RELATED TO SNDCP-XID ENCODING */ /* Encode applicable sapis (works the same in all three compression schemes) */ -static int encode_pcomp_applicable_sapis(uint8_t *dst, +static int encode_pcomp_applicable_sapis(uint8_t *dst, unsigned int dst_maxlen, const uint8_t *nsapis, uint8_t nsapis_len) { - /* NOTE: Buffer *dst needs offer at 2 bytes + /* NOTE: Buffer *dst needs offer at least 2 bytes * of space to store the generation results */ uint16_t blob; uint8_t nsapi; int i; + if (dst_maxlen < 2) + return -ENOMEM; + /* Bail if number of possible nsapis exceeds valid range * (Only 11 nsapis possible for PDP-Contexts) */ - OSMO_ASSERT(nsapis_len <= 11); + if (nsapis_len > 11) + return -EINVAL; /* Encode applicable SAPIs */ blob = 0; @@ -71,7 +75,9 @@ /* Only NSAPI 5 to 15 are applicable for user traffic (PDP- * contexts). Only for these NSAPIs SNDCP-XID parameters * can apply. See also 3GPP TS 44.065, 5.1 Service primitives */ - OSMO_ASSERT(nsapi >= 5 && nsapi <= 15); + if (nsapi < 5 || nsapi > 15) + return -EINVAL; + blob |= (1 << nsapi); } @@ -95,20 +101,25 @@ int dst_counter = 0; int rc; - OSMO_ASSERT(dst_maxlen >= 3); + if (dst_maxlen < 3) + return -ENOMEM; /* Zero out buffer */ memset(dst, 0, dst_maxlen); /* Encode applicable SAPIs */ - rc = encode_pcomp_applicable_sapis(dst, params->nsapi, + rc = encode_pcomp_applicable_sapis(dst, dst_maxlen, params->nsapi, params->nsapi_len); + if (rc < 0) + return rc; dst += rc; dst_counter += rc; /* Encode s01 (see also: 3GPP TS 44.065, 6.5.2.1, Table 5) */ - OSMO_ASSERT(params->s01 >= 0); - OSMO_ASSERT(params->s01 <= 255); + if (params->s01 < 0) + return -EINVAL; + if (params->s01 > 255) + return -EINVAL; *dst = params->s01; dst++; dst_counter++; @@ -125,26 +136,31 @@ const struct gprs_sndcp_pcomp_rfc2507_params *params) { - /* NOTE: Buffer *dst should offer at least 3 bytes + /* NOTE: Buffer *dst should offer at least 9 bytes * of space to store the generation results */ int dst_counter = 0; int rc; - OSMO_ASSERT(dst_maxlen >= 9); + if (dst_maxlen < 9) + return -ENOMEM; /* Zero out buffer */ memset(dst, 0, dst_maxlen); /* Encode applicable SAPIs */ - rc = encode_pcomp_applicable_sapis(dst, params->nsapi, + rc = encode_pcomp_applicable_sapis(dst, dst_maxlen, params->nsapi, params->nsapi_len); + if (rc < 0) + return rc; dst += rc; dst_counter += rc; /* Encode F_MAX_PERIOD (see also: 3GPP TS 44.065, 6.5.3.1, Table 6) */ - OSMO_ASSERT(params->f_max_period >= 1); - OSMO_ASSERT(params->f_max_period <= 65535); + if (params->f_max_period < 1) + return -EINVAL; + if (params->f_max_period > 65535) + return -EINVAL; *dst = (params->f_max_period >> 8) & 0xFF; dst++; dst_counter++; @@ -153,29 +169,38 @@ dst_counter++; /* Encode F_MAX_TIME (see also: 3GPP TS 44.065, 6.5.3.1, Table 6) */ - OSMO_ASSERT(params->f_max_time >= 1); - OSMO_ASSERT(params->f_max_time <= 255); + if (params->f_max_time < 1) + return -EINVAL; + if (params->f_max_time > 255) + return -EINVAL; + *dst = params->f_max_time; dst++; dst_counter++; /* Encode MAX_HEADER (see also: 3GPP TS 44.065, 6.5.3.1, Table 6) */ - OSMO_ASSERT(params->max_header >= 60); - OSMO_ASSERT(params->max_header <= 255); + if (params->max_header < 60) + return -EINVAL; + if (params->max_header > 255) + return -EINVAL; *dst = params->max_header; dst++; dst_counter++; /* Encode TCP_SPACE (see also: 3GPP TS 44.065, 6.5.3.1, Table 6) */ - OSMO_ASSERT(params->tcp_space >= 3); - OSMO_ASSERT(params->tcp_space <= 255); + if (params->tcp_space < 3) + return -EINVAL; + if (params->tcp_space > 255) + return -EINVAL; *dst = params->tcp_space; dst++; dst_counter++; /* Encode NON_TCP_SPACE (see also: 3GPP TS 44.065, 6.5.3.1, Table 6) */ - OSMO_ASSERT(params->non_tcp_space >= 3); - OSMO_ASSERT(params->non_tcp_space <= 65535); + if (params->non_tcp_space < 3) + return -EINVAL; + if (params->non_tcp_space > 65535) + return -EINVAL; *dst = (params->non_tcp_space >> 8) & 0xFF; dst++; dst_counter++; @@ -193,7 +218,7 @@ const struct gprs_sndcp_pcomp_rohc_params *params) { - /* NOTE: Buffer *dst should offer at least 36 + /* NOTE: Buffer *dst should offer at least 38 * (2 * 16 Profiles + 2 * 3 Parameter) bytes * of memory space to store generation results */ @@ -201,24 +226,30 @@ int dst_counter = 0; int rc; - OSMO_ASSERT(dst_maxlen >= 38); + if (dst_maxlen < 38) + return -ENOMEM; /* Bail if number of ROHC profiles exceeds limit * (ROHC supports only a maximum of 16 different profiles) */ - OSMO_ASSERT(params->profile_len <= 16); + if (params->profile_len > 16) + return -EINVAL; /* Zero out buffer */ memset(dst, 0, dst_maxlen); /* Encode applicable SAPIs */ - rc = encode_pcomp_applicable_sapis(dst, params->nsapi, + rc = encode_pcomp_applicable_sapis(dst, dst_maxlen, params->nsapi, params->nsapi_len); + if (rc < 0) + return rc; dst += rc; dst_counter += rc; /* Encode MAX_CID (see also: 3GPP TS 44.065, 6.5.4.1, Table 10) */ - OSMO_ASSERT(params->max_cid >= 0); - OSMO_ASSERT(params->max_cid <= 16383); + if (params->max_cid < 0) + return -EINVAL; + if (params->max_cid > 16383) + return -EINVAL; *dst = (params->max_cid >> 8) & 0xFF; dst++; *dst = params->max_cid & 0xFF; @@ -226,8 +257,10 @@ dst_counter += 2; /* Encode MAX_HEADER (see also: 3GPP TS 44.065, 6.5.4.1, Table 10) */ - OSMO_ASSERT(params->max_header >= 60); - OSMO_ASSERT(params->max_header <= 255); + if (params->max_header < 60) + return -EINVAL; + if (params->max_header > 255) + return -EINVAL; *dst = (params->max_header >> 8) & 0xFF; dst++; *dst = params->max_header & 0xFF; @@ -259,27 +292,34 @@ int dst_counter = 0; int rc; - OSMO_ASSERT(dst_maxlen >= 6); + if (dst_maxlen < 6) + return -ENOMEM; /* Zero out buffer */ memset(dst, 0, dst_maxlen); /* Encode applicable SAPIs */ - rc = encode_pcomp_applicable_sapis(dst, params->nsapi, + rc = encode_pcomp_applicable_sapis(dst, dst_maxlen, params->nsapi, params->nsapi_len); + if (rc < 0) + return rc; dst += rc; dst_counter += rc; /* Encode P0 (see also: 3GPP TS 44.065, 6.6.2.1, Table 7a) */ - OSMO_ASSERT(params->p0 >= 0); - OSMO_ASSERT(params->p0 <= 3); + if (params->p0 < 0) + return -EINVAL; + if (params->p0 > 3) + return -EINVAL; *dst = params->p0 & 0x03; dst++; dst_counter++; /* Encode P1 (see also: 3GPP TS 44.065, 6.6.2.1, Table 7a) */ - OSMO_ASSERT(params->p1 >= 512); - OSMO_ASSERT(params->p1 <= 65535); + if (params->p1 < 512) + return -EINVAL; + if (params->p1 > 65535) + return -EINVAL; *dst = (params->p1 >> 8) & 0xFF; dst++; *dst = params->p1 & 0xFF; @@ -287,8 +327,10 @@ dst_counter += 2; /* Encode P2 (see also: 3GPP TS 44.065, 6.6.2.1, Table 7a) */ - OSMO_ASSERT(params->p2 >= 6); - OSMO_ASSERT(params->p2 <= 250); + if (params->p2 < 6) + return -EINVAL; + if (params->p2 > 250) + return -EINVAL; *dst = params->p2; dst++; dst_counter++; @@ -309,33 +351,41 @@ int dst_counter = 0; int rc; - OSMO_ASSERT(dst_maxlen >= 12); + if (dst_maxlen < 12) + return -ENOMEM; /* Zero out buffer */ memset(dst, 0, dst_maxlen); /* Encode applicable SAPIs */ - rc = encode_pcomp_applicable_sapis(dst, params->nsapi, + rc = encode_pcomp_applicable_sapis(dst, dst_maxlen, params->nsapi, params->nsapi_len); + if (rc < 0) + return rc; dst += rc; dst_counter += rc; /* Encode C0 (see also: 3GPP TS 44.065, 6.6.3.1, Table 7c) */ - OSMO_ASSERT(params->c0 == 0x80 || params->c0 == 0xC0); + if (params->c0 != 0x80 && params->c0 != 0xC0) + return -EINVAL; *dst = params->c0 & 0xC0; dst++; dst_counter++; /* Encode P0 (see also: 3GPP TS 44.065, 6.6.3.1, Table 7c) */ - OSMO_ASSERT(params->p0 >= 0); - OSMO_ASSERT(params->p0 <= 3); + if (params->p0 < 0) + return -EINVAL; + if (params->p0 > 3) + return -EINVAL; *dst = params->p0 & 0x03; dst++; dst_counter++; /* Encode P1T (see also: 3GPP TS 44.065, 6.6.3.1, Table 7c) */ - OSMO_ASSERT(params->p1t >= 256); - OSMO_ASSERT(params->p1t <= 65535); + if (params->p1t < 256) + return -EINVAL; + if (params->p1t > 65535) + return -EINVAL; *dst = (params->p1t >> 8) & 0xFF; dst++; *dst = params->p1t & 0xFF; @@ -343,8 +393,10 @@ dst_counter += 2; /* Encode P1R (see also: 3GPP TS 44.065, 6.6.3.1, Table 7c) */ - OSMO_ASSERT(params->p1r >= 256); - OSMO_ASSERT(params->p1r <= 65535); + if (params->p1r < 256) + return -EINVAL; + if (params->p1r > 65535) + return -EINVAL; *dst = (params->p1r >> 8) & 0xFF; dst++; *dst = params->p1r & 0xFF; @@ -352,9 +404,12 @@ dst_counter += 2; /* Encode P3T (see also: 3GPP TS 44.065, 6.6.3.1, Table 7c) */ - OSMO_ASSERT(params->p3t >= 0); - OSMO_ASSERT(params->p3t <= 65535); - OSMO_ASSERT(params->p3t >= 2 * params->p1t); + if (params->p3t < 0) + return -EINVAL; + if (params->p3t > 65535) + return -EINVAL; + if (params->p3t < 2 * params->p1t) + return -EINVAL; *dst = (params->p3t >> 8) & 0xFF; dst++; *dst = params->p3t & 0xFF; @@ -362,9 +417,12 @@ dst_counter += 2; /* Encode P3R (see also: 3GPP TS 44.065, 6.6.3.1, Table 7c) */ - OSMO_ASSERT(params->p3r >= 0); - OSMO_ASSERT(params->p3r <= 65535); - OSMO_ASSERT(params->p3r >= 2 * params->p1r); + if (params->p3r < 0) + return -EINVAL; + if (params->p3r > 65535) + return -EINVAL; + if (params->p3r < 2 * params->p1r) + return -EINVAL; *dst = (params->p3r >> 8) & 0xFF; dst++; *dst = params->p3r & 0xFF; @@ -390,6 +448,10 @@ uint8_t payload_bytes[256]; int payload_bytes_len = -1; + /* Bail if comp_len is out of bounds */ + if (comp_field->comp_len > sizeof(comp_field->comp)) + return -EINVAL; + /* If possible, try do encode payload bytes first */ if (comp_field->rfc1144_params) { payload_bytes_len = @@ -417,13 +479,11 @@ sizeof(payload_bytes), comp_field->v44_params); } else - OSMO_ASSERT(false); + return -EINVAL; - /* Bail immediately if payload byte generation failed */ - OSMO_ASSERT(payload_bytes_len >= 0); - - /* Bail if comp_len is out of bounds */ - OSMO_ASSERT(comp_field->comp_len <= sizeof(comp_field->comp)); + /* Stop immediately if payload byte generation has failed */ + if (payload_bytes_len < 0) + return payload_bytes_len; /* Calculate length field of the data block */ if (comp_field->p) { @@ -436,23 +496,29 @@ expected_length = len + 2; } - /* Bail immediately if no sufficient memory space is supplied */ - OSMO_ASSERT(dst_maxlen >= expected_length); + /* Stop immediately if no sufficient memory space is supplied */ + if (expected_length > dst_maxlen) + return -ENOMEM; /* Check if the entity number is within bounds */ - OSMO_ASSERT(comp_field->entity <= 0x1f); + if (comp_field->entity > 0x1f) + return -EINVAL; /* Check if the algorithm number is within bounds */ compclass = gprs_sndcp_get_compression_class(comp_field); switch (compclass) { case SNDCP_XID_PROTOCOL_COMPRESSION: - OSMO_ASSERT(comp_field->algo.pcomp >= 0 && comp_field->algo.pcomp <= 0x1f); + if (comp_field->algo.pcomp < 0 || comp_field->algo.pcomp > 0x1f) + return -EINVAL; + if (comp_field->algo.pcomp < 0 || comp_field->algo.pcomp > 0x1f) + return -EINVAL; break; case SNDCP_XID_DATA_COMPRESSION: - OSMO_ASSERT(comp_field->algo.dcomp >= 0 && comp_field->algo.dcomp <= 0x1f); + if (comp_field->algo.dcomp < 0 || comp_field->algo.dcomp > 0x1f) + return -EINVAL; break; default: - OSMO_ASSERT(false); + return -EINVAL; } /* Zero out buffer */ @@ -547,10 +613,8 @@ rc = encode_comp_field(dst + byte_counter, dst_maxlen - byte_counter, comp_field); - - /* When input data is correct, there is - * no reason for the encoder to fail! */ - OSMO_ASSERT(rc >= 0); + if (rc < 0) + return rc; byte_counter += rc; } @@ -571,18 +635,19 @@ OSMO_ASSERT(comp_fields); OSMO_ASSERT(dst); - OSMO_ASSERT(dst_maxlen >= 2 + sizeof(xid_version_number)); /* Prepend header with version number */ if (version >= 0) { + byte_counter += TLV_GROSS_LEN(sizeof(xid_version_number)); + if (byte_counter > dst_maxlen) + return -ENOMEM; xid_version_number[0] = (uint8_t) (version & 0xff); dst = tlv_put(dst, SNDCP_XID_VERSION_NUMBER, sizeof(xid_version_number), xid_version_number); - byte_counter += (sizeof(xid_version_number) + 2); } - /* Stop if there is no compression fields supplied */ + /* Bail if there is no compression fields supplied */ if (llist_empty(comp_fields)) return byte_counter; @@ -590,9 +655,9 @@ rc = gprs_sndcp_pack_fields(comp_fields, comp_bytes, sizeof(comp_bytes), SNDCP_XID_DATA_COMPRESSION); - OSMO_ASSERT(rc >= 0); - - if (rc > 0) { + if (rc < 0) { + return rc; + } else if (rc > 0) { byte_counter += TLV_GROSS_LEN(rc); if (byte_counter > dst_maxlen) return -ENOMEM; @@ -603,9 +668,9 @@ rc = gprs_sndcp_pack_fields(comp_fields, comp_bytes, sizeof(comp_bytes), SNDCP_XID_PROTOCOL_COMPRESSION); - OSMO_ASSERT(rc >= 0); - - if (rc > 0) { + if (rc < 0) { + return rc; + } else if (rc > 0) { byte_counter += TLV_GROSS_LEN(rc); if (byte_counter > dst_maxlen) return -ENOMEM; -- To view, visit https://gerrit.osmocom.org/c/osmo-sgsn/+/43958?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: osmo-sgsn Gerrit-Branch: master Gerrit-Change-Id: Ia570b27a3670fed3aeb4779840292c5d216a1102 Gerrit-Change-Number: 43958 Gerrit-PatchSet: 1 Gerrit-Owner: dexter <pmaier(a)sysmocom.de>

1 0

[XS] Change in osmo-ci[master]: OBS: config: projects_other: sort alphabetically
by osmith 22 Oct '26

22 Oct '26

osmith has submitted this change. ( https://gerrit.osmocom.org/c/osmo-ci/+/43954?usp=email ) Change subject: OBS: config: projects_other: sort alphabetically ...................................................................... OBS: config: projects_other: sort alphabetically Change-Id: I0c6801edba18d2230ff9909dcc60e4f71e6071e0 --- M scripts/obs/lib/config.py 1 file changed, 2 insertions(+), 2 deletions(-) Approvals: fixeria: Looks good to me, approved Jenkins Builder: Verified diff --git a/scripts/obs/lib/config.py b/scripts/obs/lib/config.py index 5b37adb..60d641b 100644 --- a/scripts/obs/lib/config.py +++ b/scripts/obs/lib/config.py @@ -106,13 +106,13 @@ git_url_default = "https://gerrit.osmocom.org" # /project gets appended git_url_other = { "libosmo-dsp": "https://gitea.osmocom.org/sdr/libosmo-dsp", + "libosmo-sccp-legacy": "https://gitea.osmocom.org/osmocom/libosmo-sccp-legacy", "neocon": "https://github.com/laf0rge/neocon", "open5gs": "https://github.com/open5gs/open5gs", "osmo-fl2k": "https://gitea.osmocom.org/sdr/osmo-fl2k", + "pyhss": "https://github.com/nickvsnetworking/pyhss", "rtl-sdr": "https://gitea.osmocom.org/sdr/rtl-sdr", "strongswan-epdg": "https://gitea.osmocom.org/ims-volte-vowifi/strongswan-epdg", - "libosmo-sccp-legacy": "https://gitea.osmocom.org/osmocom/libosmo-sccp-legacy", - "pyhss": "https://github.com/nickvsnetworking/pyhss", } git_branch_default = "master" -- To view, visit https://gerrit.osmocom.org/c/osmo-ci/+/43954?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: osmo-ci Gerrit-Branch: master Gerrit-Change-Id: I0c6801edba18d2230ff9909dcc60e4f71e6071e0 Gerrit-Change-Number: 43954 Gerrit-PatchSet: 1 Gerrit-Owner: osmith <osmith(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: osmith <osmith(a)sysmocom.de> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de>

1 0

[S] Change in osmo-ci[master]: OBS: remove update_obs_eclipse_titan.sh
by fixeria 22 Oct '26

22 Oct '26

Attention is currently required from: osmith. fixeria has posted comments on this change by osmith. ( https://gerrit.osmocom.org/c/osmo-ci/+/43956?usp=email ) Change subject: OBS: remove update_obs_eclipse_titan.sh ...................................................................... Patch Set 1: Code-Review+1 -- To view, visit https://gerrit.osmocom.org/c/osmo-ci/+/43956?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ci Gerrit-Branch: master Gerrit-Change-Id: I39b8739c16c8bc2177a9ce4f269b946d64565aa4 Gerrit-Change-Number: 43956 Gerrit-PatchSet: 1 Gerrit-Owner: osmith <osmith(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: osmith <osmith(a)sysmocom.de> Gerrit-Comment-Date: Thu, 22 Oct 2026 13:40:57 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

1 0

[XS] Change in osmo-ci[master]: OBS: add the Osmocom titan.core repository URL
by fixeria 22 Oct '26

22 Oct '26

Attention is currently required from: osmith. fixeria has posted comments on this change by osmith. ( https://gerrit.osmocom.org/c/osmo-ci/+/43955?usp=email ) Change subject: OBS: add the Osmocom titan.core repository URL ...................................................................... Patch Set 1: Code-Review+1 -- To view, visit https://gerrit.osmocom.org/c/osmo-ci/+/43955?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ci Gerrit-Branch: master Gerrit-Change-Id: Ida79ab2604e5053bdd7a11594ebb413e87cffda9 Gerrit-Change-Number: 43955 Gerrit-PatchSet: 1 Gerrit-Owner: osmith <osmith(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: osmith <osmith(a)sysmocom.de> Gerrit-Comment-Date: Thu, 22 Oct 2026 13:40:36 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

1 0

2026

2025

2024

2023

2022

gerrit-log October 2026