]> git.ipfire.org Git - thirdparty/asterisk.git/commit
CDR: Protect from data overflow in ast_cdr_setuserfield.
authorCorey Farrell <git@cfware.com>
Mon, 27 Mar 2017 14:03:49 +0000 (10:03 -0400)
committerJoshua Colp <jcolp@digium.com>
Tue, 4 Apr 2017 10:13:18 +0000 (10:13 +0000)
commitd91f264721e111427adfa3fadde7b283dafb20a4
tree4a1e94ba2961e92c312349294bd61d75856df628
parent563b639e5ac9eeab1eb64067a6067385b8c719b3
CDR: Protect from data overflow in ast_cdr_setuserfield.

ast_cdr_setuserfield wrote to a fixed length field using strcpy. This could
result in a buffer overrun when called from chan_sip or func_cdr. This patch
adds a maximum bytes written to the field by using ast_copy_string instead.

ASTERISK-26897 #close
patches:
  0001-CDR-Protect-from-data-overflow-in-ast_cdr_setuserfie.patch submitted
    by Corey Farrell (license #5909)

Change-Id: Ib23ca77e9b9e2803a450e1206af45df2d2fdf65c
main/cdr.c