]> git.ipfire.org Git - thirdparty/asterisk.git/commit
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 28 Aug 2025 12:47:04 +0000 (06:47 -0600)
committergithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Thu, 28 Aug 2025 14:19:49 +0000 (14:19 +0000)
commit02993717b08f899d4aca9888062f35dfb198584f
treeaaff544496acb4f0bccadc269ee45f2e5db980ff
parent336f6bd627818affba5e7e2ff00ed151bc1800f5
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.

In the highly-unlikely event that get_authorization_hdr() couldn't find an
Authorization header in a request, trying to get the digest algorithm
would cauase a SEGV.  We now check that we have an auth header that matches
the realm before trying to get the algorithm from it.

Resolves: #GHSA-64qc-9x89-rx5j
res/res_pjsip_authenticator_digest.c