]> git.ipfire.org Git - thirdparty/asterisk.git/commit
projects / thirdparty / asterisk.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 144f04d) | patch
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 28 Aug 2025 12:47:04 +0000 (06:47 -0600)
committerAsterisk Development Team <asteriskteam@digium.com>
Wed, 10 Sep 2025 20:18:53 +0000 (20:18 +0000)
commita8e7f3c396fe401ec35074deaab513f3dae550ee
tree9112022d417776a2e9d6092577b52e7a0ea278d8tree | snapshot
parent144f04d733a49fde1692deaaa55f88406b608bc5commit | diff
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.

In the highly-unlikely event that get_authorization_hdr() couldn't find an
Authorization header in a request, trying to get the digest algorithm
would cauase a SEGV.  We now check that we have an auth header that matches
the realm before trying to get the algorithm from it.

Resolves: #GHSA-64qc-9x89-rx5j
(cherry picked from commit 810d6ae665da297c489757e0b1e89e8f13f32ebb)
res/res_pjsip_authenticator_digest.c diff | blob | blame | history
Mirror of https://github.com/asterisk/asterisk.git