[asterisk-bugs] [JIRA] (ASTERISK-24197) Signed integer overflow in string hash functions

[Diederik de Groot (JIRA)]

Diederik de Groot created ASTERISK-24197:
--------------------------------------------

             Summary: Signed integer overflow in string hash functions
                 Key: ASTERISK-24197
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-24197
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: General
    Affects Versions: 12.4.0
            Reporter: Diederik de Groot
            Severity: Minor


the strings.h functions:
ast_str_hash
ast_str_hash_add
ast_str_case_hash

All suffer from signed integer overflow depending on the length of the string and the previous hash value calculated, because the bounds for the int are not checked. 

193416315 * 33 cannot be represented in type 'int'




--
This message was sent by Atlassian JIRA
(v6.2#6252)