[asterisk-bugs] [LibPRI 0011593]: Incorrect parsing of Bearer capablility IE

[noreply at bugs.digium.com]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=11593 
====================================================================== 
Reported By:                richvdh
Assigned To:                mattf
====================================================================== 
Project:                    LibPRI
Issue ID:                   11593
Category:                   General
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.4.15  
SVN Branch (only for SVN checkouts, not tarball releases): N/A  
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             12-18-2007 11:38 CST
Last Modified:              01-14-2008 09:17 CST
====================================================================== 
Summary:                    Incorrect parsing of Bearer capablility IE
Description: 
The parsing of the Bearer Capability Information Element in Q.931 SETUP
messages has a number of issues; in fact, its implementation differs so
wildly from the spec that it's hard to even point at individual problems.

Hopefully I'll be able to attach some patches once I've submitted this
bug...
====================================================================== 

---------------------------------------------------------------------- 
 klaus3000 - 01-14-08 09:17  
---------------------------------------------------------------------- 
You are comparing (pos < len). I think this is wrong as "pos" is the offset
from data[] (which starts with octet 3) and "len" is the whole length of
the IE including octet 1 and 2. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
01-14-08 09:17  klaus3000      Note Added: 0076895                          
======================================================================