[asterisk-bugs] [JIRA] (ASTERISK-28449) Scheduler variable too narrow

[Gil Richard (JIRA)]

Gil Richard created ASTERISK-28449:
--------------------------------------

             Summary: Scheduler variable too narrow
                 Key: ASTERISK-28449
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-28449
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Core/Platform
    Affects Versions: 16.3.0
            Reporter: Gil Richard
            Severity: Minor


The schduler (main/sched.c) uses a signed integer value for setting timers in milliseconds.  The SIP RFC [3261 20.19] specifies an Expiry as being between 0 and (2**32)-1.  When converted to ms, the maximum value exceeds the bounds of an integer and becomes a negative value.

This can replicated by issuing a PUBLISH with an Expiry of 4294967295.  sched_settime() will complain about a negative time and assert 0.

Changing to an unsigned int or an unsigned long int will likely remedy the issue.



--
This message was sent by Atlassian JIRA
(v6.2#6252)