]> git.ipfire.org Git - thirdparty/asterisk.git/commit
AST-2022-001 - res_stir_shaken/curl: Limit file size and check start.
authorBen Ford <bford@digium.com>
Fri, 7 Jan 2022 14:50:18 +0000 (08:50 -0600)
committerGerrit <noreply@gerrit.asterisk.org>
Thu, 14 Apr 2022 17:20:45 +0000 (12:20 -0500)
commit256e1608464f0c7c0fb3a0d461893c01e2c9404e
tree189d53dd1d529e6df3dfcef52285bdee2e28c00c
parent5a19d3dfe030a16731382fd6cbb661374ea734a9
AST-2022-001 - res_stir_shaken/curl: Limit file size and check start.

Put checks in place to limit how much we will actually download, as well
as a check for the data we receive at the start to ensure it begins with
what we would expect a certificate to begin with.

ASTERISK-29872

Change-Id: Ifd3c6b8bd52b8b6192a04166ccce4fc8a8000b46
res/res_stir_shaken/curl.c
res/res_stir_shaken/stir_shaken.c
res/res_stir_shaken/stir_shaken.h