open5gs/tests/attach
Sukchan Lee cd76dc641d [SEC] Crash and Protocol Violations
The AMF will crash on the following locations when it receives a sequence
of NAS messages from a UE.

- ogs_nas_encrypt: Assertion `pkbuf->len' failed. (../lib/nas/common/security.c:86)
- gmm_state_authentication: Assertion `r != OGS_ERROR' failed. (../src/amf/gmm-sm.c:1561)

Besides the crashes found above, an incorrect protocol transition
is identified in Open5GS. Without any Registration/Attach Request message,
when the Identity Response message sent, the Core Network responds
with an Authentication Request message. According to the standard,
only the Registration/Attach Request message can start a state transition
from the 5GMM/EMM-DEREGISTERED state to the 5GMM/EMM-COMMON-PROCEDURE-INITIATED.

So I've modified the relevant code to address these issues.
2024-04-09 16:23:49 +09:00
..
abts-main.c Fixed security vulnerability for malformed packet 2023-07-26 16:32:46 +09:00
auth-test.c [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
crash-test.c [MME] Race condition between S1AP and S6A 2024-03-16 23:08:07 +09:00
emm-status-test.c [AMF/MME] No STATE Change for the EMM/GMM-STATUS 2024-02-03 10:16:16 +09:00
guti-test.c [MME] Incorrect behavior of SGsAP+Dedicated-Bearer (#3072) 2024-04-01 22:13:36 +09:00
idle-test.c Introduced Subscription identifier de-concealing 2022-12-24 20:22:45 +09:00
issues-test.c [SEC] Crash and Protocol Violations 2024-04-09 16:23:49 +09:00
meson.build Fixed security vulnerability for malformed packet 2023-07-26 16:32:46 +09:00
reset-test.c Introduced Subscription identifier de-concealing 2022-12-24 20:22:45 +09:00
s1setup-test.c [MME] Implement ENBConfigurationUpdate (#2589) 2023-09-16 20:58:58 +09:00
simple-test.c [MME/SMF] Added Extended-PCO in 4G/LTE (#2261) 2023-04-22 00:06:50 +09:00
ue-context-test.c [AMF/MME] UEContextReleaseCommand after Interity Protected (#2786) (#2794) 2023-12-13 17:54:37 +09:00