]> git.ipfire.org Git - thirdparty/asterisk.git/commit
AST-2022-001 - res_stir_shaken/curl: Limit file size and check start.
authorBen Ford <bford@digium.com>
Fri, 7 Jan 2022 14:50:18 +0000 (08:50 -0600)
committerJoshua Colp <jcolp@sangoma.com>
Thu, 14 Apr 2022 21:56:56 +0000 (16:56 -0500)
commit8f3dd86b8d214a1c165c9ba3cc563a86a3326eef
tree12e70a39c8f3a34f18e5e199f8ddbffb80ad6256
parent4aedaaadebb8ea31f39a95f26781d181fb83344a
AST-2022-001 - res_stir_shaken/curl: Limit file size and check start.

Put checks in place to limit how much we will actually download, as well
as a check for the data we receive at the start to ensure it begins with
what we would expect a certificate to begin with.

ASTERISK-29872

Change-Id: Ifd3c6b8bd52b8b6192a04166ccce4fc8a8000b46
res/res_stir_shaken/curl.c
res/res_stir_shaken/stir_shaken.c
res/res_stir_shaken/stir_shaken.h