[asterisk-bugs] [LibPRI 0015382]: [patch] bug in parsing bearer capability

[Asterisk Bug Tracker]

The following issue has been UPDATED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15382 
====================================================================== 
Reported By:                klaus3000
Assigned To:                mattf
====================================================================== 
Project:                    LibPRI
Issue ID:                   15382
Category:                   General
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     assigned
Asterisk Version:           SVN 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2009-06-23 04:33 CDT
Last Modified:              2009-06-23 04:33 CDT
====================================================================== 
Summary:                    [patch] bug in parsing bearer capability
Description: 
I think there is a bug in receive_bearer_capability() in q931.c:

  data[] contains, the IE without the first two octets.
  pos is the pointer to an octed in data[]
  len is the length of the IE, including the first two octets.

Thus, if len is compared with pos, there is an offset of 2 which needs to
be fixed.

In dump_bearer_capability() it is handled correct (len -= 2;).
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-06-23 04:33 klaus3000      Summary                  bug in parsing bearer
capability => [patch] bug in parsing bearer capability
======================================================================