From: Sean Bright <sean@seanbright.com>
Date: Mon, 4 Dec 2023 14:33:26 +0000 (-0500)
Subject: res_pjsip_header_funcs.c: Check URI parameter length before copying.
X-Git-Tag: 21.1.0-rc1~17
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fb289b0bad78c23a2546af2575bd6b58fb61fc5e;p=thirdparty%2Fasterisk.git

res_pjsip_header_funcs.c: Check URI parameter length before copying.

Fixes #477

(cherry picked from commit 002d6c2108184aacfcc3626de93ce85bfe83c051)
---

diff --git a/res/res_pjsip_header_funcs.c b/res/res_pjsip_header_funcs.c
index ad9be741ec..3272d18c09 100644
--- a/res/res_pjsip_header_funcs.c
+++ b/res/res_pjsip_header_funcs.c
@@ -1098,8 +1098,10 @@ static int read_param(void *obj)
 
 	ast_debug(2, "Successfully read %s parameter %s (length %zu)\n",
 		data->paramtype == PARAMETER_URI ? "URI" : "header", data->param_name, param_len);
-	ast_copy_string(data->buf, pj_strbuf(&param->value), data->len);
-	data->buf[pj_strlen(&param->value)] = '\0';
+	if (param_len) {
+		ast_copy_string(data->buf, pj_strbuf(&param->value), data->len);
+	}
+	data->buf[param_len] = '\0';
 
 	return 0;
 }