aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAlexander Couzens <lynxis@fe80.eu>2017-03-13 11:00:59 +0100
committerHarald Welte <laforge@gnumonks.org>2017-05-25 14:04:08 +0200
commit2faeb1ac6cc054737b153b08be1de3846256a820 (patch)
treeec01b62a4cfad466a40a7e5ec6ae86a4e05c3997
parent722bbb402f4dbf6eaea09c728fb9406ba4c026d1 (diff)
abis_rsl: fix off-by-one length check when parsing ericson tlli field
-rw-r--r--openbsc/src/libbsc/abis_rsl.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/openbsc/src/libbsc/abis_rsl.c b/openbsc/src/libbsc/abis_rsl.c
index d750df449..85c92cd77 100644
--- a/openbsc/src/libbsc/abis_rsl.c
+++ b/openbsc/src/libbsc/abis_rsl.c
@@ -2018,7 +2018,7 @@ static int abis_rsl_rx_cchan(struct msgb *msg)
/* FIXME: Replace the messy message parsing below
* with proper TV parser */
LOGP(DRSL, LOGL_INFO, "IMM.ass sent\n");
- if(msg->len < 8)
+ if(msg->len < 9)
LOGP(DRSL, LOGL_ERROR, "short IMM.ass sent message!\n");
else if(msg->data[4] != 0xf1)
LOGP(DRSL, LOGL_ERROR, "unsupported IMM.ass message format! (please fix)\n");