[asterisk-bugs] [LibPRI 0015382]: [patch] bug in parsing bearer capability

[Asterisk Bug Tracker]

The following issue has been ASSIGNED. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15382 
====================================================================== 
Reported By:                klaus3000
Assigned To:                russell
====================================================================== 
Project:                    LibPRI
Issue ID:                   15382
Category:                   General
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     assigned
Asterisk Version:           SVN 
JIRA:                        
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2009-06-23 04:33 CDT
Last Modified:              2010-05-28 04:20 CDT
====================================================================== 
Summary:                    [patch] bug in parsing bearer capability
Description: 
I think there is a bug in receive_bearer_capability() in q931.c:

  data[] contains, the IE without the first two octets.
  pos is the pointer to an octed in data[]
  len is the length of the IE, including the first two octets.

Thus, if len is compared with pos, there is an offset of 2 which needs to
be fixed.

In dump_bearer_capability() it is handled correct (len -= 2;).
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2010-05-28 04:20 russell        Assigned To              mattf => russell    
======================================================================