From: David Yat Sin <dyatsin@sangoma.com>
Date: Tue, 3 Jan 2012 16:29:41 +0000 (-0500)
Subject: freetdm: ISDN - Added check for receiving frames that are too big
X-Git-Tag: v1.2-rc1~19^2~1^2~140
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=959e4ab22df829e4aadd4cf75f00491fd8ef4e76;p=thirdparty%2Ffreeswitch.git

freetdm: ISDN - Added check for receiving frames that are too big
---

diff --git a/libs/freetdm/src/ftmod/ftmod_sangoma_isdn/ftmod_sangoma_isdn_stack_out.c b/libs/freetdm/src/ftmod/ftmod_sangoma_isdn/ftmod_sangoma_isdn_stack_out.c
index add4d3fad0..7083fe25ec 100644
--- a/libs/freetdm/src/ftmod/ftmod_sangoma_isdn/ftmod_sangoma_isdn_stack_out.c
+++ b/libs/freetdm/src/ftmod/ftmod_sangoma_isdn/ftmod_sangoma_isdn_stack_out.c
@@ -481,6 +481,11 @@ void sngisdn_snd_data(ftdm_channel_t *dchan, uint8_t *data, ftdm_size_t len)
 	sng_l1_frame_t l1_frame;
 	sngisdn_span_data_t *signal_data = (sngisdn_span_data_t*) dchan->span->signal_data;
 
+	if (len > sizeof(l1_frame.data)) {
+		ftdm_assert(FTDM_FALSE, "Received frame exceeding max size\n");
+		return;
+	}
+
 	memset(&l1_frame, 0, sizeof(l1_frame));
 	l1_frame.len = len;