Module: kamailio Branch: master Commit: c532a67db654efb21f81e058b7e3a86229766a40 URL: https://github.com/kamailio/kamailio/commit/c532a67db654efb21f81e058b7e3a862...

Author: Daniel-Constantin Mierla miconda@gmail.com Committer: Daniel-Constantin Mierla miconda@gmail.com Date: 2025-04-02T09:38:03+02:00

parser/sdp: check if value is exceeded when looking for o= version field

---

Modified: src/core/parser/sdp/sdp_helpr_funcs.c

---

Diff: https://github.com/kamailio/kamailio/commit/c532a67db654efb21f81e058b7e3a862... Patch: https://github.com/kamailio/kamailio/commit/c532a67db654efb21f81e058b7e3a862...

---

diff --git a/src/core/parser/sdp/sdp_helpr_funcs.c b/src/core/parser/sdp/sdp_helpr_funcs.c index 893ef0e58a4..5e9b3f121ab 100644 --- a/src/core/parser/sdp/sdp_helpr_funcs.c +++ b/src/core/parser/sdp/sdp_helpr_funcs.c @@ -735,7 +735,12 @@ int extract_sess_version(str *oline, str *sess_version) }

i++; - } while(len < oline->len && i < 3); + } while((cp < oline->s + oline->len) && i < 3); + + if(cp >= oline->s + oline->len) { + LM_ERR("broken o= line - version field not found\n"); + return -1; + }

len = cp - cp0 - 1; LM_DBG("end %d: >%.*s<\n", len, len, cp0);