]> git.ipfire.org Git - thirdparty/asterisk.git/commit
AST-2022-001 - res_stir_shaken/curl: Limit file size and check start.
authorBen Ford <bford@digium.com>
Fri, 7 Jan 2022 14:50:18 +0000 (08:50 -0600)
committerJoshua Colp <jcolp@sangoma.com>
Thu, 14 Apr 2022 21:57:07 +0000 (16:57 -0500)
commit4e2d36ebdb781304617a7b3c0f7f8146f0920873
treee094bfb344b3496a8cf84e06771bca62f8cd2763
parent77adb9998f798d11e9627cc22b273d86977e9d7d
AST-2022-001 - res_stir_shaken/curl: Limit file size and check start.

Put checks in place to limit how much we will actually download, as well
as a check for the data we receive at the start to ensure it begins with
what we would expect a certificate to begin with.

ASTERISK-29872

Change-Id: Ifd3c6b8bd52b8b6192a04166ccce4fc8a8000b46
res/res_stir_shaken/curl.c
res/res_stir_shaken/stir_shaken.c
res/res_stir_shaken/stir_shaken.h