]> git.ipfire.org Git - thirdparty/asterisk.git/commit
various modules: json integer overflow
authorKevin Harwell <kharwell@digium.com>
Thu, 1 Aug 2019 21:22:01 +0000 (16:22 -0500)
committerKevin Harwell <kharwell@digium.com>
Thu, 1 Aug 2019 21:22:01 +0000 (16:22 -0500)
commitf145b5854266dd58d37a6b0be9c72dcca766bed3
tree50efbc5b1cd41167977ed4a0007379c4865bdd04
parent46beb0fa1ab5756918c64666fba87dfaf0b94802
various modules: json integer overflow

There were still a few places in the code that could overflow when "packing"
a json object with a value outside the base type integer's range. For instance:

unsigned int value = INT_MAX + 1
ast_json_pack("{s: i}", value);

would result in a negative number being "packed". In those situations this patch
alters those values to a ast_json_int_t, which widens the value up to a long or
long long.

ASTERISK-28480

Change-Id: Ied530780d83e6f1772adba0e28d8938ef30c49a1
apps/app_agent_pool.c
apps/app_queue.c
channels/chan_iax2.c
funcs/func_talkdetect.c
main/aoc.c
main/ccss.c
main/channel.c
main/core_local.c
main/rtp_engine.c
main/stasis_channels.c