]> git.ipfire.org Git - thirdparty/asterisk.git/commit
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.
authorGeorge Joseph <gjoseph@sangoma.com>
Thu, 28 Aug 2025 12:47:04 +0000 (06:47 -0600)
committerGeorge Joseph <gjoseph@sangoma.com>
Thu, 28 Aug 2025 14:30:33 +0000 (08:30 -0600)
commit7fae3a8b745df715614db5ce3ab85c5e88f7c9e4
tree16ce56ea7e4ad0ec8d67224e58999de8ff3ba3e7
parent69e7d643af7086d33046f7cff5b35fb4c8bc7ca8
res_pjsip_authenticator_digest: Fix SEGV if get_authorization_hdr returns NULL.

In the highly-unlikely event that get_authorization_hdr() couldn't find an
Authorization header in a request, trying to get the digest algorithm
would cauase a SEGV.  We now check that we have an auth header that matches
the realm before trying to get the algorithm from it.

Resolves: #GHSA-64qc-9x89-rx5j
res/res_pjsip_authenticator_digest.c