SABITHSAHEB left a comment (kamailio/kamailio#4794)
Yes, this replaces #4792. It's the same HEPv3 bounds fix, reworked to be
minimal and easier to review: I dropped the per-chunk-type length table and
the fuzz harness, keeping only the checks needed to stop the out-of-bounds
read — validating the control-header length against the bytes received and
bounds-checking each chunk before it's dereferenced.
I'll close #4792 in favor of this one.
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/4794#issuecomment-4806805235
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/pull/4794/[email protected]>
_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the
sender!
