8 Feb
2015
8 Feb
'15
9:57 a.m.
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The OpenBSC GSM Base Station Controller (+MSC/HLR/SGSN)".
The branch, master has been updated
via a0735ecab558ea1759a8262eff62865bbed01051 (commit)
from 60e073e28d5e52f8eb4feaa422abc71b8b9f831b (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
http://cgit.osmocom.org/openbsc/commit/?id=a0735ecab558ea1759a8262eff62865b…
commit a0735ecab558ea1759a8262eff62865bbed01051
Author: Holger Hans Peter Freyther <holger(a)moiji-mobile.com>
Date: Sun Feb 8 09:53:44 2015 +0100
smpp: Fix potential crash in handling submitSM
In case:
* No message_payload and a 0 sm_length was used
* esm_class indicates UDH being present
* 7bit encoding was requested
The code would execute:
ud_len = *sms_msg + 1;
Which is a NULL pointer dereference and would lead
to a crash of the NITB. Enforce the limits of the
sm_length parameter and reject the messae otherwise.
Fixes: Coverity CID 1042373
-----------------------------------------------------------------------
Summary of changes:
openbsc/src/libmsc/smpp_openbsc.c | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
hooks/post-receive
--
The OpenBSC GSM Base Station Controller (+MSC/HLR/SGSN)