Hi Olivier,

 

Someone here found a bug in a piece of my code to allow things like [local_port+1]. The basic bug is that [last_Content-Type] or anything similar is truncated to last_Content. A practical fix for this is just to insist that an arithmetic minus (or plus) is followed by a digit. (There is no perfect fix – the “-“ has two uses and the code cannot mind read.)

 

Current line 1816 in call.cpp (4 Oct 2006 version) is:

 

        if (!strstr(keyword, "authentication") && !strstr(keyword, "map") && ((key = strchr(keyword,'+')) || (key = strchr(keyword,'-')))) {

 

Change this to:

 

        if (!strstr(keyword, "authentication") && !strstr(keyword, "map") && ((key = strchr(keyword,'+')) || (key = strchr(keyword,'-'))) && isdigit(*(key+1))) {

 

When I submitted this, I did not think of this possibility.

 

Peter

 

Peter Higginson

Newport Networks Ltd,

Direct line 01494 470694

http://www.newport-networks.com/

 




---------------
This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and delete this e-mail. Any unauthorized copying, disclosure or distribution of the contents in this e-mail is strictly forbidden.
---------------
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Sipp-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/sipp-users

Reply via email to