[Asterisk-code-review] res_pjsip_dialog_info_body_generator: Include LOCAL/REMOTE tags in BL... (asterisk[16])

Joe asteriskteam at digium.com
Wed Apr 14 14:20:46 CDT 2021


Joe has posted comments on this change. ( https://gerrit.asterisk.org/c/asterisk/+/15763 )

Change subject: res_pjsip_dialog_info_body_generator: Include LOCAL/REMOTE tags in BLF NOTIFY XML
......................................................................


Patch Set 5:

(1 comment)

https://gerrit.asterisk.org/c/asterisk/+/15763/5/res/res_pjsip_dialog_info_body_generator.c 
File res/res_pjsip_dialog_info_body_generator.c:

https://gerrit.asterisk.org/c/asterisk/+/15763/5/res/res_pjsip_dialog_info_body_generator.c@205 
PS5, Line 205: 			snprintf(remote_target, sizeof(remote_target), "sip:%s@%s", connected_num,
In a previous version there was a variable set to the length of the connected_num, and either invalid or from_domain, plus "sip@:".  This was removed because the implementation there was not helpful, and actually could cause a buffer overflow.

The change here prevents the overflow, but will still present a truncated form of the invalid data.  Perhaps we should add a check, using the previous formula that if need > [PJSIP_MAX_URL_SIZE] then break out.



-- 
To view, visit https://gerrit.asterisk.org/c/asterisk/+/15763
To unsubscribe, or for help writing mail filters, visit https://gerrit.asterisk.org/settings

Gerrit-Project: asterisk
Gerrit-Branch: 16
Gerrit-Change-Id: I20c5cf5b45f34d7179df6573c5abf863eb72964b
Gerrit-Change-Number: 15763
Gerrit-PatchSet: 5
Gerrit-Owner: Joe <ynadiv at corpit.xyz>
Gerrit-Reviewer: Friendly Automation
Gerrit-Reviewer: Joshua Colp <jcolp at sangoma.com>
Gerrit-CC: Stanislav Abramenkov <stas.abramenkov at gmail.com>
Gerrit-Comment-Date: Wed, 14 Apr 2021 19:20:46 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Gerrit-MessageType: comment
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-code-review/attachments/20210414/4795acae/attachment.html>


More information about the asterisk-code-review mailing list