Scott Griepentrog 79cf403faa app_sms: BufferOverflow when receiving odd length 16 bit message ...

This patch prevents an infinite loop overwriting memory when
a message is received into the unpacksms16() function, where
the length of the message is an odd number of bytes.

(closes issue ASTERISK-22590)
Reported by: Jan Juergens
Tested by: Jan Juergens



git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/1.8@403853 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2013-12-16 15:18:56 +00:00

..

app_adsiprog.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_alarmreceiver.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_amd.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_authenticate.c

Fix crash during CDR update.

2011-12-16 20:55:17 +00:00

app_cdr.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_celgenuserevent.c

Remove unnecessary channel module references.

2012-11-27 20:32:31 +00:00

app_chanisavail.c

app_chanisavail: Fix use of uninitialized variable.

2012-03-14 23:26:59 +00:00

app_channelredirect.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_chanspy.c

Fix Not Unreferencing A Spied Channel

2012-08-08 22:40:01 +00:00

app_confbridge.c

Prevent exhaustion of system resources through exploitation of event cache

2013-01-02 16:54:20 +00:00

app_controlplayback.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_dahdibarge.c

Revert changes to defaultenabled state for modules in Asterisk 1.8

2011-07-15 20:41:12 +00:00

app_dahdiras.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_db.c

Don't throw a spurious error when using DBdeltree

2013-02-14 03:42:06 +00:00

app_dial.c

Fix misuses of timeouts throughout the code.

2012-11-07 17:01:13 +00:00

app_dictate.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

app_directed_pickup.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

app_directory.c

Fix coverity UNUSED_VALUE findings in core support level files

2012-06-11 15:13:22 +00:00

app_disa.c

Coverity Report: Fix issues for error type UNINIT in Core supported modules

2012-05-10 15:35:33 +00:00

app_dumpchan.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_echo.c

Prevent Echo() from relaying control, null, and modem frames

2012-03-20 20:32:55 +00:00

app_exec.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_externalivr.c

Prevent a crash in ExternalIVR when the 'S' command is sent first.

2012-04-19 15:53:56 +00:00

app_fax.c

Load the proper XML documentation when multiple modules document the same application.

2011-10-10 14:14:48 +00:00

app_festival.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

app_flash.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_followme.c

Allow configured numbers for FollowMe to be greater than 90 characters

2012-09-06 00:54:30 +00:00

app_forkcdr.c

Make ForkCDR e option not set end time of the newly forked CDR log

2012-04-13 15:54:01 +00:00

app_getcpeid.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

app_ices.c

Add missing newlines to CLI logging

2012-04-06 18:09:19 +00:00

app_image.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_ivrdemo.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_jack.c

Fix misuses of timeouts throughout the code.

2012-11-07 17:01:13 +00:00

app_macro.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

app_meetme.c

Fix several crashes in MeetMeAdmin

2013-09-13 13:31:24 +00:00

app_milliwatt.c

Replace GNU old-style field designator extensions to fix clang warnings

2012-04-04 16:29:18 +00:00

app_minivm.c

Fix crash in app_minivm when mime encoding string

2013-01-21 04:05:29 +00:00

app_mixmonitor.c

app_mixmonitor: Fix crashes caused by unloading app_mixmonitor

2013-06-14 16:14:48 +00:00

app_morsecode.c

Document applications that play audio and do not answer unanswered calls.

2011-09-19 20:07:36 +00:00

app_mp3.c

Document applications that play audio and do not answer unanswered calls.

2011-09-19 20:07:36 +00:00

app_nbscat.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_originate.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_osplookup.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

app_page.c

Correct app_page documentation

2013-03-06 18:22:06 +00:00

app_parkandannounce.c

Make ParkAndAnnounce return to priority + 1 when return context is not defined

2013-02-24 15:33:32 +00:00

app_playback.c

Check result of ast_var_assign() calls for memory allocation failure.

2013-08-06 08:14:59 +00:00

app_playtones.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_privacy.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_queue.c

app_queue: Honor penalty limits of 0

2013-11-11 15:31:04 +00:00

app_read.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_readexten.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_readfile.c

Revert changes to defaultenabled state for modules in Asterisk 1.8

2011-07-15 20:41:12 +00:00

app_record.c

Fix misuses of timeouts throughout the code.

2012-11-07 17:01:13 +00:00

app_saycounted.c

Document applications that play audio and do not answer unanswered calls.

2011-09-19 20:07:36 +00:00

app_sayunixtime.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_senddtmf.c

Fix SendDTMF crash and channel reference leak using channel name parameter.

2012-09-27 22:08:24 +00:00

app_sendtext.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_setcallerid.c

Revert changes to defaultenabled state for modules in Asterisk 1.8

2011-07-15 20:41:12 +00:00

app_skel.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_sms.c

app_sms: BufferOverflow when receiving odd length 16 bit message

2013-12-16 15:18:56 +00:00

app_softhangup.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_speech_utils.c

Document Speech* apps hangup on failure and suggest TryExec

2012-04-20 14:47:21 +00:00

app_stack.c

Check result of ast_var_assign() calls for memory allocation failure.

2013-08-06 08:14:59 +00:00

app_system.c

Fixes some support level info so that it can be read by menuselect.

2011-10-14 15:58:44 +00:00

app_talkdetect.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_test.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_transfer.c

Fix the display of documentation for Transfer

2012-04-03 20:08:10 +00:00

app_url.c

Initialize option flags for SendURL application.

2011-10-07 19:34:55 +00:00

app_userevent.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_verbose.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_voicemail.c

app_voicemail: Memory Leaks against tests

2013-10-24 18:42:44 +00:00

app_voicemail.exports.in

Allow symbol export filtering to work properly on platforms that have symbol prefixes.

2010-04-02 18:57:58 +00:00

app_waitforring.c

Fix misuses of timeouts throughout the code.

2012-11-07 17:01:13 +00:00

app_waitforsilence.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_waituntil.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

app_while.c

Clean up and ensure proper usage of alloca()

2012-07-31 19:31:42 +00:00

app_zapateller.c

Introduce <support_level> tags in MODULEINFO.

2011-07-14 20:13:06 +00:00

enter.h

remove extraneous svn:executable properties

2005-11-29 18:24:39 +00:00

leave.h

remove extraneous svn:executable properties

2005-11-29 18:24:39 +00:00

Makefile

One of the changes in 1.6.1 was to allow app_directory to use functionality

2009-06-18 20:52:36 +00:00