diff options
| author | Neels Hofmeyr <nhofmeyr@sysmocom.de> | 2023-10-25 21:53:47 +0200 |
|---|---|---|
| committer | laforge <laforge@osmocom.org> | 2023-11-15 22:09:55 +0000 |
| commit | 8b663e4d7c1fe277fc732065f0757034b4ced939 (patch) | |
| tree | c2d0caa105a9ef7b043962524cbf7496c26026b1 /src | |
| parent | 5e5c7bc1769dcad086185310e3e203451e4026d6 (diff) | |
mgcp_parse_audio_port_pt(): fix buffer overflow
Change-Id: I18c78d15eb1593f404b4741248225b68878b463f
Diffstat (limited to 'src')
| -rw-r--r-- | src/libosmo-mgcp-client/mgcp_client.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libosmo-mgcp-client/mgcp_client.c b/src/libosmo-mgcp-client/mgcp_client.c index 5df4560cb..b5897a659 100644 --- a/src/libosmo-mgcp-client/mgcp_client.c +++ b/src/libosmo-mgcp-client/mgcp_client.c @@ -319,7 +319,7 @@ static int mgcp_parse_audio_port_pt(struct mgcp_response *r, char *line) pt_str = strtok(line, " "); while (1) { /* Do not allow excessive payload types */ - if (count > ARRAY_SIZE(r->codecs)) + if (count >= ARRAY_SIZE(r->codecs)) goto response_parse_failure_pt; pt_str = strtok(NULL, " "); |