diff options
| author | russell <russell@f38db490-d61c-443f-a65b-d21fe96a405b> | 2007-07-17 20:58:40 +0000 |
|---|---|---|
| committer | russell <russell@f38db490-d61c-443f-a65b-d21fe96a405b> | 2007-07-17 20:58:40 +0000 |
| commit | 9ebff1afc5711f86726c8ff5daa26d3fb2bf50df (patch) | |
| tree | d025d3e2d80410ad9fbca33a42cdcd6cf0f1a2f3 /channels/chan_skinny.c | |
| parent | da3820f697e71edee4681186e5713dfe9a59e73c (diff) | |
Merged revisions 75450 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4
................
r75450 | russell | 2007-07-17 15:57:56 -0500 (Tue, 17 Jul 2007) | 11 lines
Merged revisions 75449 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.2
........
r75449 | russell | 2007-07-17 15:57:09 -0500 (Tue, 17 Jul 2007) | 3 lines
Properly check for the length in the skinny packet to prevent an invalid memcpy.
(ASA-2007-016)
........
................
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@75451 f38db490-d61c-443f-a65b-d21fe96a405b
Diffstat (limited to 'channels/chan_skinny.c')
| -rw-r--r-- | channels/chan_skinny.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/channels/chan_skinny.c b/channels/chan_skinny.c index 9a122cc6f..f55002d64 100644 --- a/channels/chan_skinny.c +++ b/channels/chan_skinny.c @@ -4587,7 +4587,7 @@ static int get_input(struct skinnysession *s) } dlen = letohl(*(int *)s->inbuf); - if (dlen < 0) { + if (dlen < 4) { ast_log(LOG_WARNING, "Skinny Client sent invalid data.\n"); ast_mutex_unlock(&s->lock); return -1; |