[asterisk-bugs] [Asterisk 0015765]: [patch] Incorrect parsing of day range in pbx.c

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15765 
====================================================================== 
Reported By:                hooi
Assigned To:                lmadsen
====================================================================== 
Project:                    Asterisk
Issue ID:                   15765
Category:                   Core/PBX
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     confirmed
Asterisk Version:           1.2.X 
JIRA:                        
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!): 213789 
Request Review:              
====================================================================== 
Date Submitted:             2009-08-23 21:46 CDT
Last Modified:              2009-10-01 16:23 CDT
====================================================================== 
Summary:                    [patch] Incorrect parsing of day range in pbx.c
Description: 
The patch
http://downloads.digium.com/pub/security/AST-2009-005-1.2.diff.txt contains
incorrect sscanf format for parsing start of day and end of day in pbx.c
whereby it assumes "day" is single digit.  That is:
  sscanf(day, "%1d", &s) should be sscanf(day, "%2d", &s) [at line 4019]
and sscanf(day, "%1d", &e) should be sscanf(day, "%2d", &e) [at line
4029]

This impact on anything that uses ast_build_timing() such as GotoIfTime()
and ExecIfTime().
====================================================================== 

---------------------------------------------------------------------- 
 (0111756) svnbot (reporter) - 2009-10-01 16:23
 https://issues.asterisk.org/view.php?id=15765#c111756 
---------------------------------------------------------------------- 
Repository: asterisk
Revision: 221754

U   branches/1.2/pbx.c

------------------------------------------------------------------------
r221754 | tilghman | 2009-10-01 16:23:09 -0500 (Thu, 01 Oct 2009) | 8
lines

Days are days of month, not days of week.
Fixes regression due to AST-2009-005.
(closes issue https://issues.asterisk.org/view.php?id=15765)
 Reported by: hooi
 Patches: 
       20090825__issue15765.diff.txt uploaded by tilghman (license 14)
 Tested by: nic_bellamy

------------------------------------------------------------------------

http://svn.digium.com/view/asterisk?view=rev&revision=221754 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-10-01 16:23 svnbot         Checkin                                      
2009-10-01 16:23 svnbot         Note Added: 0111756                          
======================================================================