sysmocom/asterisk
11
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
asterisk/channels
History
Matthew Jordan c37c7b4a2c AST-2012-005: Fix remotely exploitable heap overflow in keypad button handling 
When handling a keypad button message event, the received digit is placed into
a fixed length buffer that acts as a queue.  When a new message event is
received, the length of that buffer is not checked before placing the new digit
on the end of the queue.  The situation exists where sufficient keypad button
message events would occur that would cause the buffer to be overrun.  This
patch explicitly checks that there is sufficient room in the buffer before
appending a new digit.

(closes issue ASTERISK-19592)
Reported by: Russell Bryant
........

Merged revisions 363100 from http://svn.asterisk.org/svn/asterisk/branches/1.6.2
........

Merged revisions 363102 from http://svn.asterisk.org/svn/asterisk/branches/1.8
........

Merged revisions 363103 from http://svn.asterisk.org/svn/asterisk/branches/10


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@363105 65c4cc65-6c06-0410-ace0-fbb531ad65f3
2012-04-23 13:53:24 +00:00
..
h323 Asterisk media architecture conversion - no more format bitfields 2011-02-03 16:22:10 +00:00
misdn Correct some set-but-unused variable warnings in the mISDN library. 2012-02-22 21:10:05 +00:00
sip Add IPv6 address support to security events framework. 2012-04-16 21:20:50 +00:00
chan_agent.c Fix negative return handling in channel drivers 2012-04-16 21:58:06 +00:00
chan_alsa.c Avoid cppcheck warnings; removing unused vars and a bit of cleanup. 2012-04-17 18:57:40 +00:00
chan_bridge.c Finalize ast_channel opaquification 2012-03-13 18:20:34 +00:00
chan_console.c Opaquify ast_channel structs and lists 2012-02-29 16:52:47 +00:00
chan_dahdi.c Use ast_channel_lock_both() where it was inlined before. 2012-04-20 16:23:01 +00:00
chan_gtalk.c Avoid cppcheck warnings; removing unused vars and a bit of cleanup. 2012-04-17 18:57:40 +00:00
chan_h323.c Avoid cppcheck warnings; removing unused vars and a bit of cleanup. 2012-04-17 18:57:40 +00:00
chan_iax2.c Make trunkfreq take effect when set 2012-04-12 16:25:09 +00:00
chan_jingle.c Fix setting CDR variables in the hangup extension 2012-03-28 19:39:24 +00:00
chan_local.c Use ast_channel_lock_both() where it was inlined before. 2012-04-20 16:23:01 +00:00
chan_mgcp.c Add missing newlines to CLI logging 2012-04-06 18:19:03 +00:00
chan_misdn.c Use ast_channel_lock_both() where it was inlined before. 2012-04-20 16:23:01 +00:00
chan_multicast_rtp.c Opaquification for ast_format structs in struct ast_channel 2012-02-24 00:32:20 +00:00
chan_nbs.c Opaquification for ast_format structs in struct ast_channel 2012-02-24 00:32:20 +00:00
chan_oss.c Eliminate a bunch of shadow warnings. 2012-03-08 17:02:52 +00:00
chan_phone.c Finalize ast_channel opaquification 2012-03-13 18:20:34 +00:00
chan_phone.h rename DialTone.h to chan_phone.h because chan_phone.c is the only file using it 2008-05-28 20:00:21 +00:00
chan_sip.c Avoid cppcheck warnings; removing unused vars and a bit of cleanup. 2012-04-17 18:57:40 +00:00
chan_skinny.c AST-2012-005: Fix remotely exploitable heap overflow in keypad button handling 2012-04-23 13:53:24 +00:00
chan_unistim.c Fix a variety of potential buffer overflows 2012-04-19 02:40:55 +00:00
chan_vpb.cc Finalize ast_channel opaquification 2012-03-13 18:20:34 +00:00
console_board.c import the recent additions for video console into trunk, 2008-06-29 21:17:14 +00:00
console_gui.c Add missing newlines to CLI logging 2012-04-06 18:19:03 +00:00
console_video.c Add missing newlines to CLI logging 2012-04-06 18:19:03 +00:00
console_video.h implement the 'freeze' function for incoming frames; 2008-06-30 15:45:15 +00:00
iax2-parser.c Asterisk media architecture conversion - no more format bitfields 2011-02-03 16:22:10 +00:00
iax2-parser.h Asterisk media architecture conversion - no more format bitfields 2011-02-03 16:22:10 +00:00
iax2-provision.c Convert some strncpys to ast_copy_string 2012-04-19 19:05:17 +00:00
iax2-provision.h Don't reload a configuration file if nothing has changed. 2007-08-16 21:09:46 +00:00
iax2.h Media Project Phase2: SILK 8khz-24khz, SLINEAR 8khz-192khz, SPEEX 32khz, hd audio ConfBridge, and other stuff 2011-02-22 23:04:49 +00:00
Makefile Extract sig_ss7 out of chan_dahdi. 2010-06-07 20:04:42 +00:00
misdn_config.c Merged revisions 317478 via svnmerge from 2011-05-05 22:55:09 +00:00
sig_analog.c Finalize ast_channel opaquification 2012-03-13 18:20:34 +00:00
sig_analog.h push 'outgoing' flag from sig_XXX up to chan_dahdi 2012-02-18 08:02:08 +00:00
sig_pri.c Add original party id and reason support. 2012-04-20 00:57:13 +00:00
sig_pri.h Add ability to ignore layer 1 alarms for BRI PTMP lines. 2012-04-18 16:41:17 +00:00
sig_ss7.c Change directly setting _softhangup in sig_ss7.c to use ast_softhangup_nolock(). 2012-03-07 18:33:12 +00:00
sig_ss7.h Setup DSP when SS7 call is connected or early media is available. 2012-03-05 21:48:32 +00:00
vcodecs.c Avoid cppcheck warnings; removing unused vars and a bit of cleanup. 2012-04-17 18:57:40 +00:00
vgrabbers.c free memory used by the x11 grabber when closing it. 2008-07-14 16:50:54 +00:00