From 5718429ec99f185efe2e733463700b8997f66b61 Mon Sep 17 00:00:00 2001 From: Harald Welte Date: Mon, 22 Jan 2018 01:49:02 +0100 Subject: MNCC: Add input validation There appears to have been no input validation whatsoever on MNCC messages. Hence it was very easy for an external MNCC handler to crash OsmoMSC, such as in OS#2853 Change-Id: Idaf3b8e409c84564b1eb26d01a19c605f89b14f4 Closes: OS#2853 --- include/osmocom/msc/mncc.h | 1 + 1 file changed, 1 insertion(+) (limited to 'include/osmocom') diff --git a/include/osmocom/msc/mncc.h b/include/osmocom/msc/mncc.h index 49f0c8b83..d2f054147 100644 --- a/include/osmocom/msc/mncc.h +++ b/include/osmocom/msc/mncc.h @@ -215,5 +215,6 @@ int mncc_sock_init(struct gsm_network *net, const char *sock_path); || msg_type == GSM_TCH_FRAME_AMR \ || msg_type == GSM_BAD_FRAME) +int mncc_prim_check(const struct gsm_mncc *mncc_prim, unsigned int len); #endif -- cgit v1.2.3