From: Mathieu Rene <mrene@avgs.ca>
Date: Wed, 27 Jul 2011 16:26:30 +0000 (-0400)
Subject: Fix segfault in sofia's stun code
X-Git-Tag: v1.2-rc1~103^2~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7403db70055dfebb25792703186bca1630144069;p=thirdparty%2Ffreeswitch.git

Fix segfault in sofia's stun code
---

diff --git a/libs/sofia-sip/libsofia-sip-ua/stun/stun_common.c b/libs/sofia-sip/libsofia-sip-ua/stun/stun_common.c
index 33b1a42458..f67656363d 100644
--- a/libs/sofia-sip/libsofia-sip-ua/stun/stun_common.c
+++ b/libs/sofia-sip/libsofia-sip-ua/stun/stun_common.c
@@ -100,7 +100,7 @@ int stun_parse_message(stun_msg_t *msg)
   msg->stun_attr = NULL;
   while (len > 0) {
     i = stun_parse_attribute(msg, p);
-    if (i <= 0) {
+    if (i <= 0 || i > len) {
       SU_DEBUG_3(("%s: Error parsing attribute.\n", __func__));
       return -1;
     }