Attention is currently required from: dexter, pespin.
laforge has posted comments on this change by dexter. ( https://gerrit.osmocom.org/c/osmo-msc/+/43229?usp=email )
Change subject: sgs_iface: guard against over-long MME name IEs. ......................................................................
Patch Set 3: Code-Review+1
(1 comment)
File src/libmsc/sgs_iface.c:
https://gerrit.osmocom.org/c/osmo-msc/+/43229/comment/40b8b07b_2ee5cac4?usp=... : PS2, Line 165: const uint8_t *mme_name_enc = TLVP_VAL_MINLEN(tp, SGSAP_IE_MME_NAME, SGS_MME_NAME_LEN);
Can you have a look at the newest version/release of the spec? What's the sense in it being exactly […]
MME name is not some random DNS domain name, but a "fully qualified domain name (FQDN) as specified in subclause 19.4.2.1 of 3GPP TS 23.003" - that's the *.mccXXX.mncYYY.3gppnetwork.org domain, and in that scheme the length is known.