kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-11-09 03:18:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
2073ca37b6cc80e7172971d578f954543b01a0b7
asterisk/apps
History
Matthew Jordan 2073ca37b6 Fix remotely exploitable stack overrun in Milliwatt 
Milliwatt is vulnerable to a remotely exploitable stack overrun when using
the 'o' option.  This occurs due to the milliwatt_generate function not
accounting for AST_FRIENDLY_OFFSET when calculating the maximum number of
samples it can put in the output buffer.

This patch resolves this issue by taking into account AST_FRIENDLY_OFFSET
when determining the maximum number of samples allowed.  Note that at no
point is remote code execution possible.  The data that is written into the
buffer is the pre-defined Milliwatt data, and not custom data.

(closes issue ASTERISK-19541)
Reported by: Russell Bryant
Tested by: Matt Jordan
Patches:
  milliwatt_stack_overrun.rev1.txt by Russell Bryant (license 6283)
  Note that this patch was written by Russell, even though Matt uploaded it
........

Merged revisions 359645 from http://svn.asterisk.org/svn/asterisk/branches/1.6.2


git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@359656 65c4cc65-6c06-0410-ace0-fbb531ad65f3
2012-03-15 18:35:59 +00:00
..
app_adsiprog.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_alarmreceiver.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_amd.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_authenticate.c
Fix crash during CDR update.
2011-12-16 20:55:17 +00:00
app_cdr.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_celgenuserevent.c
Fixes some support level info so that it can be read by menuselect.
2011-10-14 15:58:44 +00:00
app_chanisavail.c
app_chanisavail: Fix use of uninitialized variable.
2012-03-14 23:26:59 +00:00
app_channelredirect.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_chanspy.c
Fix channel reference leak in ChanSpy.
2012-03-02 15:45:45 +00:00
app_confbridge.c
Fix documentation of 's' option.
2011-11-17 17:04:05 +00:00
app_controlplayback.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_dahdibarge.c
Revert changes to defaultenabled state for modules in Asterisk 1.8
2011-07-15 20:41:12 +00:00
app_dahdiras.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_db.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_dial.c
Add missing connected line macro calls to initial dial for Dial and Queue apps.
2012-03-15 18:17:30 +00:00
app_dictate.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_directed_pickup.c
Remove obsolete todo comment about PICKUPRESULT.
2011-09-13 22:10:15 +00:00
app_directory.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_disa.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_dumpchan.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_echo.c
Document applications that play audio and do not answer unanswered calls.
2011-09-19 20:07:36 +00:00
app_exec.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_externalivr.c
Fix invalid reads/writes due to incorrect sizeof().
2012-03-14 10:03:07 +00:00
app_fax.c
Load the proper XML documentation when multiple modules document the same application.
2011-10-10 14:14:48 +00:00
app_festival.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_flash.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_followme.c
Make FollowMe optionally update connected line information when the accepting endpoint is bridged.
2012-01-11 19:18:37 +00:00
app_forkcdr.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_getcpeid.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_ices.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_image.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_ivrdemo.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_jack.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_macro.c
Upgrade app_macro to core
2011-09-27 20:10:13 +00:00
app_meetme.c
Prevent SLA settings from getting wiped out on reload
2012-01-09 15:37:12 +00:00
app_milliwatt.c
Fix remotely exploitable stack overrun in Milliwatt
2012-03-15 18:35:59 +00:00
app_minivm.c
Fix deadlock when using dummy channels.
2011-09-26 19:30:39 +00:00
app_mixmonitor.c
Document applications that play audio and do not answer unanswered calls.
2011-09-19 20:07:36 +00:00
app_morsecode.c
Document applications that play audio and do not answer unanswered calls.
2011-09-19 20:07:36 +00:00
app_mp3.c
Document applications that play audio and do not answer unanswered calls.
2011-09-19 20:07:36 +00:00
app_nbscat.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_originate.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_osplookup.c
Remove r338137 and r338138.
2011-09-30 09:31:48 +00:00
app_page.c
Remove dupliate 'i' option table entry in app_page.c.
2012-02-28 19:32:44 +00:00
app_parkandannounce.c
Fix crash in ParkAndAnnounce.
2012-02-09 02:52:20 +00:00
app_playback.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_playtones.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_privacy.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_queue.c
Add missing connected line macro calls to initial dial for Dial and Queue apps.
2012-03-15 18:17:30 +00:00
app_read.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_readexten.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_readfile.c
Revert changes to defaultenabled state for modules in Asterisk 1.8
2011-07-15 20:41:12 +00:00
app_record.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_saycounted.c
Document applications that play audio and do not answer unanswered calls.
2011-09-19 20:07:36 +00:00
app_sayunixtime.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_senddtmf.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_sendtext.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_setcallerid.c
Revert changes to defaultenabled state for modules in Asterisk 1.8
2011-07-15 20:41:12 +00:00
app_skel.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_sms.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_softhangup.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_speech_utils.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_stack.c
Enable macros in 1.8 to find the next highest "h" extension in a context, like in 1.4.
2012-03-13 07:44:23 +00:00
app_system.c
Fixes some support level info so that it can be read by menuselect.
2011-10-14 15:58:44 +00:00
app_talkdetect.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_test.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_transfer.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_url.c
Initialize option flags for SendURL application.
2011-10-07 19:34:55 +00:00
app_userevent.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_verbose.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_voicemail.c
Fix crash in app_voicemail during close_mailbox
2012-02-25 17:21:29 +00:00
app_voicemail.exports.in
Allow symbol export filtering to work properly on platforms that have symbol prefixes.
2010-04-02 18:57:58 +00:00
app_waitforring.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_waitforsilence.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_waituntil.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_while.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
app_zapateller.c
Introduce <support_level> tags in MODULEINFO.
2011-07-14 20:13:06 +00:00
enter.h
remove extraneous svn:executable properties
2005-11-29 18:24:39 +00:00
leave.h
remove extraneous svn:executable properties
2005-11-29 18:24:39 +00:00
Makefile
One of the changes in 1.6.1 was to allow app_directory to use functionality
2009-06-18 20:52:36 +00:00
rpt_flow.pdf
remove extraneous svn:executable properties
2005-11-29 18:24:39 +00:00