Dongoing left a comment (kamailio/kamailio#4816)
> Hello. The Version 5.5.0 is old and not maintained anymore. Please check if
> the reported issue is also present in 6.1.3 or 6.0.7, the latest releases of
> the maintained branches.
Hi, I checked on current master (6.2.0-dev1, newer than 6.0.7), and I see all
the sites still there, still only a NULL check, no data.len. I should mention:
sending a short AVP to a live node won't show anything, since the value sits in
an shm pool with no redzone, so the over-read is silent (no crash, ASan won't
catch it either). I reproduced the exact get_4bytes + cxdx_avp.c:321-326 guard
on a 3-byte value → heap-buffer-overflow READ of size 1. I think the same check
you already use for Item-Number at :556 fixes it
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/4816#issuecomment-4931208998
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/4816/[email protected]>
_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the
sender!
