[asterisk-bugs] [Asterisk 0015886]: T38 udptl.c bufferoverflow

Asterisk Bug Tracker noreply at bugs.digium.com
Tue Sep 15 13:52:41 CDT 2009


The following issue has been set as DUPLICATE OF issue 0015586. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15886 
====================================================================== 
Reported By:                elsto
Assigned To:                kpfleming
====================================================================== 
Project:                    Asterisk
Issue ID:                   15886
Category:                   Channels/chan_sip/T.38
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     assigned
Asterisk Version:           1.6.1.6 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Request Review:              
====================================================================== 
Date Submitted:             2009-09-14 03:09 CDT
Last Modified:              2009-09-15 13:52 CDT
====================================================================== 
Summary:                    T38 udptl.c bufferoverflow
Description: 
I get a bufferoverflow in udptl.c

udptl.c:292 encode_open_type: Buffer overflow detected (23 + 53 > 72)
udptl.c:1014 ast_udptl_write: UDPTL Transmission error to <IP>:20548:
Message too long
======================================================================
Relationships       ID      Summary
----------------------------------------------------------------------
duplicate of        0015586 [patch] Failure to negotiate T.38
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-09-15 13:52 kpfleming      Relationship added       duplicate of 0015586
======================================================================




More information about the asterisk-bugs mailing list