dexter uploaded patch set #2 to this change.

View Change

sndcp_xid: fix length check in gprs_sndcp_compile_xid

The function gprs_sndcp_compile_xid gets an output buffer (dst) and
a length (dst_maxlen), but unfortunately, the length is not checked
before data is written to the output buffer (tlv_put).

The problem was reported by osmocom.org user tsato
(see related ticket)

This patch has been orted from:
osmo-sgsn.git I977946a036f96d4dee2656bef048e2618198db40

Related: OS#7095
Change-Id: I38844155027673d90079c84df5cfd85053f48656
---
M src/sndcp/sndcp_xid.c
M tests/sndcp/sndcp_xid_test.c
M tests/sndcp/sndcp_xid_test.ok
3 files changed, 41 insertions(+), 2 deletions(-)

git pull ssh://gerrit.osmocom.org:29418/libosmo-gprs refs/changes/62/43962/2

To view, visit change 43962. To unsubscribe, or for help writing mail filters, visit settings.