Addresses AST-2011-008, memory corruption and remote crash in SIP driver.

AST-2011-008

git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.6.2@324643 65c4cc65-6c06-0410-ace0-fbb531ad65f3

diff --git a/channels/chan_sip.c b/channels/chan_sip.c
index 7908a14b0a87212a215a98527d0ec63ddbe2bd5f..2981eb6dce2126f516c7e0f0cf9fd0ef3e678601 100644 (file)
--- a/channels/chan_sip.c
+++ b/channels/chan_sip.c
@@ -22706,7 +22706,8 @@ static int sipsock_read(int *id, int fd, short events, void *ignore)
                return -1;
        }
 
-       req.len = res;
+       /* req.data will have the correct length in case of nulls */
+       req.len = ast_str_strlen(req.data);
        req.socket.fd = sipsock;
        set_socket_transport(&req.socket, SIP_TRANSPORT_UDP);
        req.socket.tcptls_session       = NULL;