Also, I've realized, that for "advanced smslib user" thre would be perfect 
to have such functionality, to make possible to send some messages 
part-by-part. For instance, application should to send some long info 
consisting of 10 parts. While some other process should send some urgent 
short message, that should arrive to the user as early as possible, even 
before the large info message will be completely sent to him. 

Dear developers, would you plac such kind of API (for advanced smslib 
users) for some future release? 

пятница, 18 января 2013 г., 14:12:05 UTC+4 пользователь Ivan Yawiz написал:
>
> Hi all!
>
> I'd like to test the "transport part" of some service that accepts SMS as 
> input. It was noted, that after the first testing it had some problems with 
> multipart sms, it couldn't accept sms if the number of parts exceed 12 (but 
> we managed to send at least 32 parts), resulting in "transport part" 
> spamming some other components of the service by some requests with total 
> number much more than 32 parts of multipart SMS. That challenged as to look 
> for some possible vulnerabilities in multipart SMS handling, since we 
> realized that one multipart sms can paralyze the whole service.
>
> The possible attack vector is to send several "parts" with the same IED1 
> and the same TP-MR. Or, to send several messages with the same IED1 and 
> incrementing TP-MR, but some TP-MRs missed, to check that "transport part" 
> doesn't hang when processing such "multiparts".
>
> The first question is what happens, when we send the long SMS 
> via  Service.getInstance().sendMessage(msg); ?
> As I see as it implemented in code, It just converts the long text to long 
> PDu and writes it to port, with no attempt to divide it into several parts 
> messages. If I understand it right, parts are formed by the modem itself?
>
> The second question is how can I emulate the sending multiple parts "of 
> the same multipart messages" using SMSlib? Unfortunately, PDUutils doesn't 
> present any pretty API for managing IED1 and TP-MR (and some other) bytes 
> before sending the message. If some java tools to handle it are know, 
> please let me know! 
> Thnx!
>

-- 
You received this message because you are subscribed to the Google Groups 
"SMSLib Discussion Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msg/smslib/-/2I84aPoOUI4J.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to