Module: kamailio Branch: master Commit: 6118e5b654e7344bf68ca0b77f4f39567980e0ef URL: https://github.com/kamailio/kamailio/commit/6118e5b654e7344bf68ca0b77f4f39567980e0ef
Author: Daniel-Constantin Mierla <[email protected]> Committer: Daniel-Constantin Mierla <[email protected]> Date: 2025-12-18T09:54:43+01:00 sms: check for name field length --- Modified: src/modules/sms/libsms_getsms.c --- Diff: https://github.com/kamailio/kamailio/commit/6118e5b654e7344bf68ca0b77f4f39567980e0ef.diff Patch: https://github.com/kamailio/kamailio/commit/6118e5b654e7344bf68ca0b77f4f39567980e0ef.patch --- diff --git a/src/modules/sms/libsms_getsms.c b/src/modules/sms/libsms_getsms.c index b7c7daecf1a..f7cfdd6f3ea 100644 --- a/src/modules/sms/libsms_getsms.c +++ b/src/modules/sms/libsms_getsms.c @@ -432,6 +432,10 @@ static int splitpdu(struct modem *mdm, char *pdu, struct incame_sms *sms) start += 3; end = strstr(start, "\","); if(end != 0) { + if(end - start >= SMS_NAME_LEN) { + /* too long */ + return -1; + } memcpy(sms->name, start, end - start); sms->name[end - start] = 0; } else { _______________________________________________ Kamailio - Development Mailing List -- [email protected] To unsubscribe send an email to [email protected] Important: keep the mailing list in the recipients, do not reply only to the sender!
