Scott Griepentrog f1676a15f9 app_sms: BufferOverflow when receiving odd length 16 bit message ...

This patch prevents an infinite loop overwriting memory when
a message is received into the unpacksms16() function, where
the length of the message is an odd number of bytes.

(closes issue ASTERISK-22590)
Reported by: Jan Juergens
Tested by: Jan Juergens


git-svn-id: https://origsvn.digium.com/svn/asterisk/certified/branches/11.6@403860 65c4cc65-6c06-0410-ace0-fbb531ad65f3

2013-12-16 15:38:48 +00:00

..

confbridge

Confbridge: empty conference not being torn down

2013-09-17 14:24:02 +00:00

app_adsiprog.c

Replace direct access to channel name with accessor functions

2012-01-09 22:15:50 +00:00

app_alarmreceiver.c

Convert some strncpys to ast_copy_string

2012-04-19 19:05:17 +00:00

app_amd.c

Opaquify ast_channel structs and lists

2012-02-29 16:52:47 +00:00

app_authenticate.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_cdr.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_celgenuserevent.c

Remove unnecessary channel module references.

2012-11-27 20:38:23 +00:00

app_chanisavail.c

app_chanisavail: Fix use of uninitialized variable.

2012-03-14 23:29:32 +00:00

app_channelredirect.c

Finalize ast_channel opaquification

2012-03-13 18:20:34 +00:00

app_chanspy.c

Fix Not Unreferencing A Spied Channel

2012-08-08 22:45:15 +00:00

app_confbridge.c

app_confbridge: Fix memory leak on reload.

2013-06-13 18:47:48 +00:00

app_controlplayback.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

app_dahdibarge.c

Opaquify ast_channel typedefs, fd arrays, and softhangup flag

2012-03-01 22:09:18 +00:00

app_dahdiras.c

Opaquify ast_channel typedefs, fd arrays, and softhangup flag

2012-03-01 22:09:18 +00:00

app_db.c

Don't throw a spurious error when using DBdeltree

2013-02-14 03:48:39 +00:00

app_dial.c

app_dial: Honor the 'c' flag when the calling party hangs up

2013-02-22 15:41:31 +00:00

app_dictate.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

app_directed_pickup.c

Named call pickup groups. Fixes, missing functionality, and improvements.

2012-09-20 17:15:05 +00:00

app_directory.c

Fix coverity UNUSED_VALUE findings in core support level files

2012-06-11 15:23:30 +00:00

app_disa.c

Coverity Report: Fix issues for error type UNINIT in Core supported modules

2012-05-10 15:57:26 +00:00

app_dumpchan.c

Verbose logging discrepancies

2013-08-29 22:16:41 +00:00

app_echo.c

Prevent Echo() from relaying control, null, and modem frames

2012-03-20 20:42:34 +00:00

app_exec.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

app_externalivr.c

Remove declaration of eivr_connect_socket because it no longer exists.

2012-06-20 11:47:12 +00:00

app_fax.c

Opaquify ast_channel structs and lists

2012-02-29 16:52:47 +00:00

app_festival.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

app_flash.c

Opaquify ast_channel typedefs, fd arrays, and softhangup flag

2012-03-01 22:09:18 +00:00

app_followme.c

Allow configured numbers for FollowMe to be greater than 90 characters

2012-09-06 00:59:23 +00:00

app_forkcdr.c

Make ForkCDR e option not set end time of the newly forked CDR log

2012-04-13 16:12:17 +00:00

app_getcpeid.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

app_ices.c

Add missing newlines to CLI logging

2012-04-06 18:19:03 +00:00

app_image.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

app_ivrdemo.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_jack.c

Multiple revisions 375993-375994

2012-11-07 19:03:42 +00:00

app_macro.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

app_meetme.c

Fix several crashes in MeetMeAdmin

2013-09-13 13:48:34 +00:00

app_milliwatt.c

Replace GNU old-style field designator extensions to fix clang warnings

2012-04-04 18:08:28 +00:00

app_minivm.c

Fix crash in app_minivm when mime encoding string

2013-01-21 04:07:05 +00:00

app_mixmonitor.c

Fix memory leaks

2013-08-30 16:20:21 +00:00

app_morsecode.c

Merged revisions 336717 via svnmerge from

2011-09-19 20:23:29 +00:00

app_mp3.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

app_nbscat.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

app_originate.c

Allow support for early media on AMI originates and call files.

2012-08-08 22:39:40 +00:00

app_osplookup.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

app_page.c

app_page and app_confbridge: Fix custom announcement on entering conference.

2013-02-05 19:09:40 +00:00

app_parkandannounce.c

Make ParkAndAnnounce return to priority + 1 when return context is not defined

2013-02-24 15:37:26 +00:00

app_playback.c

Check result of ast_var_assign() calls for memory allocation failure.

2013-08-06 08:19:42 +00:00

app_playtones.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_privacy.c

Opaquify ast_channel structs and lists

2012-02-29 16:52:47 +00:00

app_queue.c

'queue add member' help text correction

2013-09-12 00:02:37 +00:00

app_read.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_readexten.c

Opaquify ast_channel structs and lists

2012-02-29 16:52:47 +00:00

app_readfile.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

app_record.c

Multiple revisions 375993-375994

2012-11-07 19:03:42 +00:00

app_saycounted.c

Merged revisions 336717 via svnmerge from

2011-09-19 20:23:29 +00:00

app_sayunixtime.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_senddtmf.c

Fix SendDTMF crash and channel reference leak using channel name parameter.

2012-09-27 22:19:03 +00:00

app_sendtext.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_setcallerid.c

Opaquify ast_channel structs and lists

2012-02-29 16:52:47 +00:00

app_skel.c

Fix reloading an unchanged file with the Config Options API

2012-06-07 20:32:07 +00:00

app_sms.c

app_sms: BufferOverflow when receiving odd length 16 bit message

2013-12-16 15:38:48 +00:00

app_softhangup.c

ast_channel opaquification of pointers and integral types

2012-02-20 23:43:27 +00:00

app_speech_utils.c

Document Speech* apps hangup on failure and suggest TryExec

2012-04-20 14:50:42 +00:00

app_stack.c

Check result of ast_var_assign() calls for memory allocation failure.

2013-08-06 08:19:42 +00:00

app_system.c

Multiple revisions 369001-369002

2012-06-15 16:20:16 +00:00

app_talkdetect.c

Finalize ast_channel opaquification

2012-03-13 18:20:34 +00:00

app_test.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

app_transfer.c

Fix the display of documentation for Transfer

2012-04-03 20:14:01 +00:00

app_url.c

Merged revisions 339777 via svnmerge from

2011-10-07 19:37:33 +00:00

app_userevent.c

Add AMI event documentation

2012-06-25 17:59:34 +00:00

app_verbose.c

Verbose logging discrepancies

2013-08-29 22:16:41 +00:00

app_voicemail.c

app_voicemail: Fix leaking config objects when msg_id doesn't match

2013-09-04 21:11:48 +00:00

app_voicemail.exports.in

Remove some symbol exports that got missed in the removal of global symbols.

2012-06-15 15:33:41 +00:00

app_waitforring.c

Multiple revisions 375993-375994

2012-11-07 19:03:42 +00:00

app_waitforsilence.c

Opaquification for ast_format structs in struct ast_channel

2012-02-24 00:32:20 +00:00

app_waituntil.c

Merged revisions 328247 via svnmerge from

2011-07-14 20:28:54 +00:00

app_while.c

Clean up and ensure proper usage of alloca()

2012-07-31 20:21:43 +00:00

app_zapateller.c

Opaquify ast_channel structs and lists

2012-02-29 16:52:47 +00:00

enter.h

…

leave.h

…

Makefile

New HD ConfBridge conferencing application.

2011-04-21 18:11:40 +00:00