]> git.ipfire.org Git - thirdparty/asterisk.git/commit
AST-2016-002 chan_sip.c: Fix retransmission timeout integer overflow. 72/2172/2
authorRichard Mudgett <rmudgett@digium.com>
Mon, 28 Sep 2015 22:07:42 +0000 (17:07 -0500)
committerRichard Mudgett <rmudgett@digium.com>
Wed, 3 Feb 2016 21:05:59 +0000 (15:05 -0600)
commit68a6a721b5f42c1707a0d10de9f89d91f6fdb31c
treec7871f72395921033f29511e25449ac3b27ad3f5
parentb5fb4f7e8909ff63911ba6b088faba2db1859dac
AST-2016-002 chan_sip.c: Fix retransmission timeout integer overflow.

Setting the sip.conf timert1 value to a value higher than 1245 can cause
an integer overflow and result in large retransmit timeout times.  These
large timeout times hold system file descriptors hostage and can cause the
system to run out of file descriptors.

NOTE: The default sip.conf timert1 value is 500 which does not expose the
vulnerability.

* The overflow is now detected and the previous timeout time is
calculated.

ASTERISK-25397 #close
Reported by: Alexander Traud

Change-Id: Ia7231f2f415af1cbf90b923e001b9219cff46290
channels/chan_sip.c