[asterisk-bugs] [JIRA] (ASTERISK-25715) ASAN:global-buffer-overflow pjsip

[Badalian Vyacheslav (JIRA)]

Badalian Vyacheslav created ASTERISK-25715:
----------------------------------------------

             Summary: ASAN:global-buffer-overflow pjsip
                 Key: ASTERISK-25715
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25715
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: pjproject/pjsip
    Affects Versions: 13.7.0
         Environment: centos 7 x64
            Reporter: Badalian Vyacheslav


last master from
https://github.com/asterisk/pjproject/issues

{code}
*CLI> =================================================================
==2372==ERROR: AddressSanitizer: global-buffer-overflow on address 0x7f2039991340 at pc 0x7f2039924381 bp 0x7f2031300b40 sp 0x7f2031300b30
READ of size 7 at 0x7f2039991340 thread T34
    #0 0x7f2039924380 in pj_memcmp ../../pjlib/include/pj/string.h:682
    #1 0x7f2039924380 in pjsip_method_init_np ../src/pjsip/sip_msg.c:254
    #2 0x7f203992d602 in int_parse_req_line ../src/pjsip/sip_parser.c:1579
    #3 0x7f203992d602 in int_parse_msg ../src/pjsip/sip_parser.c:975
    #4 0x7f2039930cec in pjsip_parse_rdata ../src/pjsip/sip_parser.c:762
    #5 0x7f203994e4f3 in pjsip_tpmgr_receive_packet ../src/pjsip/sip_transport.c:1768
    #6 0x7f2039954bc0 in udp_on_read_complete ../src/pjsip/sip_transport_udp.c:175
    #7 0x7f20375c74f9 in ioqueue_dispatch_read_event ../src/pj/ioqueue_common_abs.c:591
    #8 0x7f20375cbdfa in pj_ioqueue_poll ../src/pj/ioqueue_select.c:966
    #9 0x7f203993b4ea in pjsip_endpt_handle_events2 ../src/pjsip/sip_endpoint.c:741
    #10 0x7f203a658576 in monitor_thread_exec /root/asterisk-13.7.0/res/res_pjsip.c:3555
    #11 0x7f20375cea3d in thread_main ../src/pj/os_core_unix.c:541
    #12 0x7f2045f0edc4 in start_thread (/lib64/libpthread.so.0+0x7dc4)
    #13 0x7f20451ee21c in clone (/lib64/libc.so.6+0xf621c)

0x7f2039991340 is located 99422720 bytes insideASAN:SIGSEGV
==2372==AddressSanitizer: while reporting a bug found another one.Ignoring.
{code}



--
This message was sent by Atlassian JIRA
(v6.2#6252)