This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "UNNAMED PROJECT". The branch, master has been updated via bd0d5bf5d8957c965473960ceb659043bac21128 (commit) from 87a04b6b95d827c5c82c3e7ffb99f60e86028f25 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- http://cgit.osmocom.org/osmo-hlr/commit/?id=bd0d5bf5d8957c965473960ceb65904… commit bd0d5bf5d8957c965473960ceb659043bac21128 Author: Harald Welte <laforge(a)gnumonks.org> Date: Mon Nov 6 03:55:02 2017 +0900 hlr.c: Avoid overflow of lu_operation.subscr.imsi It appears that hlr_subscriber.imsi is 16 buffers in size: 15 chars for IMSI + 1 byte NUL. However, osmo_gsup_message.imsi is 17 bytes (for whatever reason), so we cannot simply do a strpy() as this might overflow the hlr_subscriber.imsi field! TODO: check if weactually ever receive a too-long IMSI in GSUP and reject that at an earlier time in the code flow. Fixes: Coverity CID#164746 Change-Id: I9ff94e6bb0ad2ad2a7c010d3ea7dad9af0f3c048 ----------------------------------------------------------------------- Summary of changes: src/hlr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) hooks/post-receive -- UNNAMED PROJECT