]> git.ipfire.org Git - thirdparty/asterisk.git/commit
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 28 Aug 2025 12:47:04 +0000 (06:47 -0600)
committerGeorge Joseph <gjoseph@sangoma.com>
Thu, 28 Aug 2025 14:19:44 +0000 (14:19 +0000)
commit810d6ae665da297c489757e0b1e89e8f13f32ebb
tree9112022d417776a2e9d6092577b52e7a0ea278d8
parent14ea4d3b3988490c4c69acb4ceb476dc875013dd
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.

In the highly-unlikely event that get_authorization_hdr() couldn't find an
Authorization header in a request, trying to get the digest algorithm
would cauase a SEGV.  We now check that we have an auth header that matches
the realm before trying to get the algorithm from it.

Resolves: #GHSA-64qc-9x89-rx5j
res/res_pjsip_authenticator_digest.c