open5gs/tests
Sukchan Lee cd76dc641d [SEC] Crash and Protocol Violations
The AMF will crash on the following locations when it receives a sequence
of NAS messages from a UE.

- ogs_nas_encrypt: Assertion `pkbuf->len' failed. (../lib/nas/common/security.c:86)
- gmm_state_authentication: Assertion `r != OGS_ERROR' failed. (../src/amf/gmm-sm.c:1561)

Besides the crashes found above, an incorrect protocol transition
is identified in Open5GS. Without any Registration/Attach Request message,
when the Identity Response message sent, the Core Network responds
with an Authentication Request message. According to the standard,
only the Registration/Attach Request message can start a state transition
from the 5GMM/EMM-DEREGISTERED state to the 5GMM/EMM-COMMON-PROCEDURE-INITIATED.

So I've modified the relevant code to address these issues.
2024-04-09 16:23:49 +09:00
..
310014 Introduced Subscription identifier de-concealing 2022-12-24 20:22:45 +09:00
af Include cause in HTTP response ProblemDetails (#3051) 2024-04-04 23:29:20 +09:00
app [AMF] Increase the number of SLICE 512 to 1024 (#2761)(#2765) 2023-12-04 20:46:58 +09:00
attach [SEC] Crash and Protocol Violations 2024-04-09 16:23:49 +09:00
common [SEC] Crash and Protocol Violations 2024-04-09 16:23:49 +09:00
core Fixed dynamic-stack-buffer-overflow (#2578, #2577) 2023-09-05 21:58:05 +09:00
crypt Fixed dynamic-stack-buffer-overflow (#2578, #2577) 2023-09-05 21:58:05 +09:00
csfb [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
fuzzing [Fuzzing] bug fix 59062 and increasing converge 2023-05-25 22:47:47 +09:00
handover [MME/AMF] Fixed crash following Handover Request (#3014) 2024-02-29 23:02:38 +09:00
non3gpp Revert "[GTP/PFCP]] incorrect dst TEI=0/SEID=0 (#3043)" 2024-03-26 08:04:26 +09:00
registration [SEC] Crash and Protocol Violations 2024-04-09 16:23:49 +09:00
sctp [SEPP] Initial Update for 5G Roaming (#2739) 2023-11-19 19:34:51 +09:00
slice [AMF] Fixed crash in no context setup (#2999) 2024-03-04 21:03:07 +09:00
unit [SBI] Preamble parsing issues in MIME (#3058) 2024-03-17 10:36:29 +09:00
volte [SGWC] Fixed crashing when Create Bearer Response occurs after Delete Bearer Response (#3109) 2024-04-07 22:51:46 +09:00
vonr [SMF] Added Bi-Directional Flow (#2909) 2024-02-17 20:43:15 +01:00
meson.build [EPC] Support ePDG Interface (#1039) 2021-06-21 22:36:38 +09:00