August 2026 - gerrit-log - lists.osmocom.org

[M] Change in pysim[master]: osmo-smdpp: derive the Profile Metadata from the Profile
by jwaigel 13 Aug '26

13 Aug '26

Attention is currently required from: dexter, jolly, jwaigel. Hello Jenkins Builder, dexter, jolly, I'd like you to reexamine a change. Please visit https://gerrit.osmocom.org/c/pysim/+/43205?usp=email to look at the new patch set (#3). The following approvals got outdated and were removed: Verified+1 by Jenkins Builder Change subject: osmo-smdpp: derive the Profile Metadata from the Profile ...................................................................... osmo-smdpp: derive the Profile Metadata from the Profile Only the ICCID came from the Profile. The SPN was hardcoded, the profileName was the MatchingID, and the profileClass was always 'operational'. SGP.22 section 2.4.5.3 does not allow that class for a Profile that uses the USIM test algorithm. Add ProfileMetadata.from_pes() to read these fields from the Profile. If the Profile has no EF.SPN, the SPN is now empty. An LPA shows a Profile that is marked 'test' only in Device Test Mode. Change-Id: Ie24dd5ac0ef541c1899dd923a9db568209bbfa62 --- M osmo-smdpp.py M pySim/esim/es8p.py M tests/unittests/test_esim_saip.py 3 files changed, 63 insertions(+), 6 deletions(-) git pull ssh://gerrit.osmocom.org:29418/pysim refs/changes/05/43205/3 -- To view, visit https://gerrit.osmocom.org/c/pysim/+/43205?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newpatchset Gerrit-Project: pysim Gerrit-Branch: master Gerrit-Change-Id: Ie24dd5ac0ef541c1899dd923a9db568209bbfa62 Gerrit-Change-Number: 43205 Gerrit-PatchSet: 3 Gerrit-Owner: jwaigel <johannes(a)waigel.me> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: dexter <pmaier(a)sysmocom.de> Gerrit-Reviewer: jolly <andreas(a)eversberg.eu> Gerrit-CC: laforge <laforge(a)osmocom.org> Gerrit-CC: pespin <pespin(a)sysmocom.de> Gerrit-Attention: jwaigel <johannes(a)waigel.me> Gerrit-Attention: jolly <andreas(a)eversberg.eu> Gerrit-Attention: dexter <pmaier(a)sysmocom.de>

1 0

[XS] Change in libosmocore[master]: gsm/cbsp: stack OOB read in the CBSP WRITE-REPLACE decoder
by pespin 13 Aug '26

13 Aug '26

Attention is currently required from: fixeria, laforge. pespin has posted comments on this change by laforge. ( https://gerrit.osmocom.org/c/libosmocore/+/43215?usp=email ) Change subject: gsm/cbsp: stack OOB read in the CBSP WRITE-REPLACE decoder ...................................................................... Patch Set 3: Code-Review+2 -- To view, visit https://gerrit.osmocom.org/c/libosmocore/+/43215?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: libosmocore Gerrit-Branch: master Gerrit-Change-Id: Ifd3d2c65722fbc124c48b860f060077e539d2737 Gerrit-Change-Number: 43215 Gerrit-PatchSet: 3 Gerrit-Owner: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Attention: laforge <laforge(a)osmocom.org> Gerrit-Attention: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Comment-Date: Thu, 13 Aug 2026 12:43:50 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

1 0

[S] Change in libosmo-sigtran[master]: xua_snm: constify xua_msg param in xua_snm_rx_*
by pespin 13 Aug '26

13 Aug '26

pespin has uploaded this change for review. ( https://gerrit.osmocom.org/c/libosmo-sigtran/+/43225?usp=email ) Change subject: xua_snm: constify xua_msg param in xua_snm_rx_* ...................................................................... xua_snm: constify xua_msg param in xua_snm_rx_* There's no need to allocate talloc tons of times in format_affected_pcs(), which morever requrire the xua_msg pointer to be writable. Change-Id: I3e5844a6f0d40c1df3ae31955bb8b24d891d86b1 --- M src/xua_internal.h M src/xua_snm.c 2 files changed, 24 insertions(+), 21 deletions(-) git pull ssh://gerrit.osmocom.org:29418/libosmo-sigtran refs/changes/25/43225/1 diff --git a/src/xua_internal.h b/src/xua_internal.h index 5195b35..0317669 100644 --- a/src/xua_internal.h +++ b/src/xua_internal.h @@ -68,11 +68,11 @@ const uint32_t *aff_pc, unsigned int num_aff_pc, const char *info_str, bool available); -void xua_snm_rx_daud(struct osmo_ss7_asp *asp, struct xua_msg *xua); -void xua_snm_rx_duna(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua); -void xua_snm_rx_dava(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua); -void xua_snm_rx_dupu(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua); -void xua_snm_rx_scon(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua); +void xua_snm_rx_daud(struct osmo_ss7_asp *asp, const struct xua_msg *xua); +void xua_snm_rx_duna(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua); +void xua_snm_rx_dava(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua); +void xua_snm_rx_dupu(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua); +void xua_snm_rx_scon(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua); int m3ua_rx_msg(struct osmo_ss7_asp *asp, struct msgb *msg); struct msgb *m3ua_msgb_alloc(const char *name); diff --git a/src/xua_snm.c b/src/xua_snm.c index 2abc42e..03addcf 100644 --- a/src/xua_snm.c +++ b/src/xua_snm.c @@ -48,24 +48,27 @@ osmo_static_assert(M3UA_IEI_ROUTE_CTX == SUA_IEI_ROUTE_CTX, _sa_rctx); osmo_static_assert(M3UA_IEI_INFO_STRING == SUA_IEI_INFO_STRING, _sa_inf_str); -static const char *format_affected_pcs_c(void *ctx, const struct osmo_ss7_instance *s7i, - const struct xua_msg_part *ie_aff_pc) +#define UINT32_MAX_DIGITS 10 +#define AFFECTED_PCS_MAX_LEN ((2 + MAX_PC_STR_LEN + 1 + UINT32_MAX_DIGITS) * OSMO_SS7_MAX_RCTX_COUNT + 1) +static const char *format_affected_pcs(const struct osmo_ss7_instance *s7i, const struct xua_msg_part *ie_aff_pc) { + static char buf[AFFECTED_PCS_MAX_LEN]; + struct osmo_strbuf sb = { .buf = buf, .len = sizeof(buf) }; const uint32_t *aff_pc = (const uint32_t *) ie_aff_pc->dat; unsigned int num_aff_pc = ie_aff_pc->len / sizeof(uint32_t); - char *out = talloc_strdup(ctx, ""); - int i; + unsigned int i; + buf[0] = '\0'; for (i = 0; i < num_aff_pc; i++) { uint32_t _aff_pc = ntohl(aff_pc[i]); uint32_t pc = _aff_pc & 0xffffff; uint8_t mask = _aff_pc >> 24; /* append point code + mask */ - out = talloc_asprintf_append(out, "%s%s/%u", i == 0 ? "" : ", ", - osmo_ss7_pointcode_print(s7i, pc), mask); + OSMO_STRBUF_PRINTF(sb, "%s%s/%u", i == 0 ? "" : ", ", + osmo_ss7_pointcode_print(s7i, pc), mask); } - return out; + return buf; } void xua_tx_snm_available(struct osmo_ss7_asp *asp, const uint32_t *rctx, unsigned int num_rctx, @@ -405,7 +408,7 @@ } /* receive DAUD from ASP; pc is 'affected PC' IE with mask in network byte order! */ -void xua_snm_rx_daud(struct osmo_ss7_asp *asp, struct xua_msg *xua) +void xua_snm_rx_daud(struct osmo_ss7_asp *asp, const struct xua_msg *xua) { struct xua_msg_part *ie_aff_pc = xua_msg_find_tag(xua, M3UA_IEI_AFFECTED_PC); const char *info_str = xua_msg_get_str(xua, M3UA_IEI_INFO_STRING); @@ -424,7 +427,7 @@ num_rctx = ss7_asp_get_all_rctx_be(asp, rctx, ARRAY_SIZE(rctx), NULL); LOGPASP(asp, log_ss, LOGL_INFO, "Rx DAUD(%s) for %s\n", info_str ? info_str : "", - format_affected_pcs_c(xua, asp->inst, ie_aff_pc)); + format_affected_pcs(asp->inst, ie_aff_pc)); /* iterate over list of point codes, generate DAVA/DUPU */ for (i = 0; i < num_aff_pc; i++) { @@ -484,7 +487,7 @@ } /* an incoming xUA DUNA was received from a remote SG */ -void xua_snm_rx_duna(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua) +void xua_snm_rx_duna(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua) { struct xua_msg_part *ie_aff_pc = xua_msg_find_tag(xua, M3UA_IEI_AFFECTED_PC); struct xua_msg_part *ie_ssn = xua_msg_find_tag(xua, SUA_IEI_SSN); @@ -497,7 +500,7 @@ OSMO_ASSERT(asp->cfg.role == OSMO_SS7_ASP_ROLE_ASP); LOGPASP(asp, log_ss, LOGL_NOTICE, "Rx DUNA(%s) for %s\n", info_str ? info_str : "", - format_affected_pcs_c(xua, asp->inst, ie_aff_pc)); + format_affected_pcs(asp->inst, ie_aff_pc)); if (asp->cfg.proto == OSMO_SS7_ASP_PROT_SUA && ie_ssn) { /* when the SSN is included, DUNA corresponds to the SCCP N-STATE primitive */ @@ -517,7 +520,7 @@ } /* an incoming xUA DAVA was received from a remote SG */ -void xua_snm_rx_dava(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua) +void xua_snm_rx_dava(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua) { struct xua_msg_part *ie_aff_pc = xua_msg_find_tag(xua, M3UA_IEI_AFFECTED_PC); struct xua_msg_part *ie_ssn = xua_msg_find_tag(xua, SUA_IEI_SSN); @@ -530,7 +533,7 @@ OSMO_ASSERT(asp->cfg.role == OSMO_SS7_ASP_ROLE_ASP); LOGPASP(asp, log_ss, LOGL_NOTICE, "Rx DAVA(%s) for %s\n", info_str ? info_str : "", - format_affected_pcs_c(xua, asp->inst, ie_aff_pc)); + format_affected_pcs(asp->inst, ie_aff_pc)); if (asp->cfg.proto == OSMO_SS7_ASP_PROT_SUA && ie_ssn) { /* when the SSN is included, DAVA corresponds to the SCCP N-STATE primitive */ @@ -550,7 +553,7 @@ } /* an incoming SUA/M3UA DUPU was received from a remote SG */ -void xua_snm_rx_dupu(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua) +void xua_snm_rx_dupu(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua) { uint32_t aff_pc = xua_msg_get_u32(xua, M3UA_IEI_AFFECTED_PC); const char *info_str = xua_msg_get_str(xua, M3UA_IEI_INFO_STRING); @@ -583,7 +586,7 @@ } /* an incoming SUA/M3UA SCON was received from a remote ASP/SG/IPSP */ -void xua_snm_rx_scon(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, struct xua_msg *xua) +void xua_snm_rx_scon(struct osmo_ss7_asp *asp, struct osmo_ss7_as *as, const struct xua_msg *xua) { struct xua_msg_part *ie_aff_pc = xua_msg_find_tag(xua, M3UA_IEI_AFFECTED_PC); const char *info_str = xua_msg_get_str(xua, M3UA_IEI_INFO_STRING); @@ -595,7 +598,7 @@ OSMO_ASSERT(ie_aff_pc); LOGPASP(asp, log_ss, LOGL_NOTICE, "RX SCON(%s) for %s level=%u\n", info_str ? info_str : "", - format_affected_pcs_c(xua, asp->inst, ie_aff_pc), cong_level ? *cong_level : 0); + format_affected_pcs(asp->inst, ie_aff_pc), cong_level ? *cong_level : 0); xua_snm_scon(as, (const uint32_t *) ie_aff_pc->dat, ie_aff_pc->len / sizeof(uint32_t), concerned_dpc, (const uint8_t *) cong_level, info_str); -- To view, visit https://gerrit.osmocom.org/c/libosmo-sigtran/+/43225?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: libosmo-sigtran Gerrit-Branch: master Gerrit-Change-Id: I3e5844a6f0d40c1df3ae31955bb8b24d891d86b1 Gerrit-Change-Number: 43225 Gerrit-PatchSet: 1 Gerrit-Owner: pespin <pespin(a)sysmocom.de>

1 0

[XS] Change in libosmocore[master]: gsm/cbsp: stack OOB read in the CBSP WRITE-REPLACE decoder
by laforge 13 Aug '26

13 Aug '26

Attention is currently required from: fixeria, pespin. laforge has posted comments on this change by laforge. ( https://gerrit.osmocom.org/c/libosmocore/+/43215?usp=email ) Change subject: gsm/cbsp: stack OOB read in the CBSP WRITE-REPLACE decoder ...................................................................... Patch Set 3: (1 comment) Patchset: PS2: > tp is a pointer, not an array. Either change the tp param or pass a num_elem_array or something. Done -- To view, visit https://gerrit.osmocom.org/c/libosmocore/+/43215?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: libosmocore Gerrit-Branch: master Gerrit-Change-Id: Ifd3d2c65722fbc124c48b860f060077e539d2737 Gerrit-Change-Number: 43215 Gerrit-PatchSet: 3 Gerrit-Owner: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Attention: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: pespin <pespin(a)sysmocom.de> Gerrit-Comment-Date: Thu, 13 Aug 2026 12:19:53 +0000 Gerrit-HasComments: Yes Gerrit-Has-Labels: No Comment-In-Reply-To: pespin <pespin(a)sysmocom.de>

1 0

[XS] Change in libosmocore[master]: gsm/cbsp: stack OOB read in the CBSP WRITE-REPLACE decoder
by laforge 13 Aug '26

13 Aug '26

Attention is currently required from: fixeria, pespin. laforge has posted comments on this change by laforge. ( https://gerrit.osmocom.org/c/libosmocore/+/43215?usp=email ) Change subject: gsm/cbsp: stack OOB read in the CBSP WRITE-REPLACE decoder ...................................................................... Patch Set 3: This change is ready for review. -- To view, visit https://gerrit.osmocom.org/c/libosmocore/+/43215?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: libosmocore Gerrit-Branch: master Gerrit-Change-Id: Ifd3d2c65722fbc124c48b860f060077e539d2737 Gerrit-Change-Number: 43215 Gerrit-PatchSet: 3 Gerrit-Owner: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Attention: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: pespin <pespin(a)sysmocom.de> Gerrit-Comment-Date: Thu, 13 Aug 2026 12:19:47 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: No

1 0

[M] Change in simtrace2[master]: Add osmo_apdu_segment_in2() to ensure correct parsing of GP GET DATA
by dexter 13 Aug '26

13 Aug '26

Attention is currently required from: laforge, lynxis lazus. dexter has posted comments on this change by lynxis lazus. ( https://gerrit.osmocom.org/c/simtrace2/+/43185?usp=email ) Change subject: Add osmo_apdu_segment_in2() to ensure correct parsing of GP GET DATA ...................................................................... Patch Set 8: Code-Review+1 (2 comments) File host/lib/apdu_dispatch.c: https://gerrit.osmocom.org/c/simtrace2/+/43185/comment/9ca466bb_66366477?us… : PS3, Line 120: ac->hdr.cla & 0x80 && /* check for GP */ > I don't know what I should do here. […] From what I can see the behavior is not GP specific. The ETSI TS 102 221 Table 7.1 suggests the same behavior. It may be the case that ETSI has followed GP here so that there is no incompatibility. In Annex C you find example transactions that illustrate how the procedure byte mechanism works. You can also look at pysim/pySim/transport/__init__.py. There we have the behavior implemented in __send_apdu_T0. The check is a little different. The special handling applies for Case1, Case2 and Case3 here (maybe we should be more precise here). I think the whole idea behind this is that if someone sends a C-APDU that generates data on the card and gets the length wrong. Then the card sends 6CXX, where XX is the correct length. The terminal then sends a corrected C-APDU and everything can continue normally without involving the higher layers. File host/tests/apdu_dispatch/apdu_dispatch_test.c: https://gerrit.osmocom.org/c/simtrace2/+/43185/comment/09351065_31d2847d?us… : PS3, Line 70: OSMO_ASSERT(rc == APDU_ACT_TX_CAPDU_TO_CARD); > I've added a check on apdu_case. Done -- To view, visit https://gerrit.osmocom.org/c/simtrace2/+/43185?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: simtrace2 Gerrit-Branch: master Gerrit-Change-Id: Ie238662e7e6a10dd4283ede0c8d8d73bc375c247 Gerrit-Change-Number: 43185 Gerrit-PatchSet: 8 Gerrit-Owner: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: dexter <pmaier(a)sysmocom.de> Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Attention: laforge <laforge(a)osmocom.org> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Comment-Date: Thu, 13 Aug 2026 11:54:34 +0000 Gerrit-HasComments: Yes Gerrit-Has-Labels: Yes Comment-In-Reply-To: lynxis lazus <lynxis(a)fe80.eu> Comment-In-Reply-To: dexter <pmaier(a)sysmocom.de>

1 0

[M] Change in pysim[master]: osmo-smdpp: derive the Profile Metadata from the Profile
by laforge 13 Aug '26

13 Aug '26

Attention is currently required from: dexter, jolly, jwaigel. laforge has posted comments on this change by jwaigel. ( https://gerrit.osmocom.org/c/pysim/+/43205?usp=email ) Change subject: osmo-smdpp: derive the Profile Metadata from the Profile ...................................................................... Patch Set 2: (1 comment) File osmo-smdpp.py: https://gerrit.osmocom.org/c/pysim/+/43205/comment/f03ad87a_29fb6b15?usp=em… : PS2, Line 638: # look up profile based on matchingID. We simply check if a given file exists for now.. I don't like that the 'if matchingId' (or alternatively an 'else' clause) has been removed here. So if someone ever implementst he above TODO for EID based downoad, they have to re-introduce it. That change in this patch seems completely unrelated to the actual purpose. Please consider undoing that part; otherwise I think this patch is fine and a welcome contribution. -- To view, visit https://gerrit.osmocom.org/c/pysim/+/43205?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: pysim Gerrit-Branch: master Gerrit-Change-Id: Ie24dd5ac0ef541c1899dd923a9db568209bbfa62 Gerrit-Change-Number: 43205 Gerrit-PatchSet: 2 Gerrit-Owner: jwaigel <johannes(a)waigel.me> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: dexter <pmaier(a)sysmocom.de> Gerrit-Reviewer: jolly <andreas(a)eversberg.eu> Gerrit-CC: laforge <laforge(a)osmocom.org> Gerrit-CC: pespin <pespin(a)sysmocom.de> Gerrit-Attention: jwaigel <johannes(a)waigel.me> Gerrit-Attention: jolly <andreas(a)eversberg.eu> Gerrit-Attention: dexter <pmaier(a)sysmocom.de> Gerrit-Comment-Date: Thu, 13 Aug 2026 11:27:07 +0000 Gerrit-HasComments: Yes Gerrit-Has-Labels: No

1 0

[M] Change in osmo-ttcn3-hacks[master]: 5gc: keep NUS after UeContextRelease
by laforge 13 Aug '26

13 Aug '26

Attention is currently required from: pespin. laforge has posted comments on this change by pespin. ( https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/43214?usp=email ) Change subject: 5gc: keep NUS after UeContextRelease ...................................................................... Patch Set 2: Code-Review+1 -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/43214?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: I84b91bf00491a1ba0c2ee8d57e61996a88fe12d3 Gerrit-Change-Number: 43214 Gerrit-PatchSet: 2 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: osmith <osmith(a)sysmocom.de> Gerrit-Attention: pespin <pespin(a)sysmocom.de> Gerrit-Comment-Date: Thu, 13 Aug 2026 11:20:56 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

1 0

[S] Change in onomondo-ipa[master]: Use mandatory transaction ID in AuthenticateClientOkDPEsipa
by dexter 13 Aug '26

13 Aug '26

Attention is currently required from: jolly. dexter has posted comments on this change by jolly. ( https://gerrit.osmocom.org/c/onomondo-ipa/+/43223?usp=email ) Change subject: Use mandatory transaction ID in AuthenticateClientOkDPEsipa ...................................................................... Patch Set 1: Code-Review+2 -- To view, visit https://gerrit.osmocom.org/c/onomondo-ipa/+/43223?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: onomondo-ipa Gerrit-Branch: master Gerrit-Change-Id: I3aed3f6ff6f10b49045ff7a4b0f0019ac1d75c65 Gerrit-Change-Number: 43223 Gerrit-PatchSet: 1 Gerrit-Owner: jolly <andreas(a)eversberg.eu> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: dexter <pmaier(a)sysmocom.de> Gerrit-Attention: jolly <andreas(a)eversberg.eu> Gerrit-Comment-Date: Thu, 13 Aug 2026 11:19:57 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

1 0

[XS] Change in libosmo-sigtran[master]: xua: Avoid OOB read of Routing Context with len < 4
by laforge 13 Aug '26

13 Aug '26

Attention is currently required from: pespin. laforge has posted comments on this change by pespin. ( https://gerrit.osmocom.org/c/libosmo-sigtran/+/43222?usp=email ) Change subject: xua: Avoid OOB read of Routing Context with len < 4 ...................................................................... Patch Set 1: Code-Review+1 -- To view, visit https://gerrit.osmocom.org/c/libosmo-sigtran/+/43222?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: libosmo-sigtran Gerrit-Branch: master Gerrit-Change-Id: If19f210c8d6a308f99b4f06fdc06581ffdc62696 Gerrit-Change-Number: 43222 Gerrit-PatchSet: 1 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Attention: pespin <pespin(a)sysmocom.de> Gerrit-Comment-Date: Thu, 13 Aug 2026 11:17:55 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

1 0