Module: kamailio
Branch: master
Commit: 515514f18a3526bb20b217880dd61749b516481b
URL: 
https://github.com/kamailio/kamailio/commit/515514f18a3526bb20b217880dd61749b516481b

Author: Daniel-Constantin Mierla <[email protected]>
Committer: Daniel-Constantin Mierla <[email protected]>
Date: 2026-05-25T08:03:37+02:00

topos: checks for prefix size

---

Modified: src/modules/topos/tps_msg.c

---

Diff:  
https://github.com/kamailio/kamailio/commit/515514f18a3526bb20b217880dd61749b516481b.diff
Patch: 
https://github.com/kamailio/kamailio/commit/515514f18a3526bb20b217880dd61749b516481b.patch

---

diff --git a/src/modules/topos/tps_msg.c b/src/modules/topos/tps_msg.c
index 50354680f0d..c35a95da7b4 100644
--- a/src/modules/topos/tps_msg.c
+++ b/src/modules/topos/tps_msg.c
@@ -283,6 +283,11 @@ static int tps_extract_uuid_from_uri(str *uri, int ctmode, 
tps_data_t *ptsd)
                                        uri->s);
                        return 1;
                }
+               if(tuuid.len < 6) {
+                       LM_DBG("topos uri parameter too short in [%.*s]\n", 
uri->len,
+                                       uri->s);
+                       return 1;
+               }
        } else {
                if(puri.user.len < 6) {
                        LM_DBG("uri user too short for topos uuid in [%.*s]\n", 
uri->len,
@@ -488,6 +493,10 @@ int tps_dlg_message_update(sip_msg_t *msg, tps_data_t 
*ptsd, int ctmode)
                        LM_DBG("prefix para not found\n");
                        return 1;
                }
+               if(tuuid.len < 6) {
+                       LM_DBG("prefix param too short\n");
+                       return 1;
+               }
        } else {
                if(msg->parsed_uri.user.len < TPS_TUUID_MIN_LEN) {
                        LM_DBG("not an expected user format\n");

_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!

Reply via email to