10 Nov
2017
10 Nov
'17
10:27 p.m.
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "UNNAMED PROJECT".
The branch, master has been updated
via bd0d5bf5d8957c965473960ceb659043bac21128 (commit)
from 87a04b6b95d827c5c82c3e7ffb99f60e86028f25 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
http://cgit.osmocom.org/osmo-hlr/commit/?id=bd0d5bf5d8957c965473960ceb65904…
commit bd0d5bf5d8957c965473960ceb659043bac21128
Author: Harald Welte <laforge(a)gnumonks.org>
Date: Mon Nov 6 03:55:02 2017 +0900
hlr.c: Avoid overflow of lu_operation.subscr.imsi
It appears that hlr_subscriber.imsi is 16 buffers in size:
15 chars for IMSI + 1 byte NUL. However, osmo_gsup_message.imsi
is 17 bytes (for whatever reason), so we cannot simply do a strpy()
as this might overflow the hlr_subscriber.imsi field!
TODO: check if weactually ever receive a too-long IMSI in GSUP and
reject that at an earlier time in the code flow.
Fixes: Coverity CID#164746
Change-Id: I9ff94e6bb0ad2ad2a7c010d3ea7dad9af0f3c048
-----------------------------------------------------------------------
Summary of changes:
src/hlr.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
hooks/post-receive
--
UNNAMED PROJECT