Skip to content

Commit 907f2ac

Browse files
authored
Merge pull request from GHSA-8w5j-6g2j-pxcp
Fix Heap-buffer-overflow in parse_descs and parse_message
2 parents 5f18366 + c07f05a commit 907f2ac

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

Diff for: libsofia-sip-ua/sdp/sdp_parse.c

+8
Original file line numberDiff line numberDiff line change
@@ -396,6 +396,10 @@ static void parse_message(sdp_parser_t *p)
396396
record = next(&message, CRLF, strip)) {
397397
field = record[0];
398398

399+
if (strlen(record) < 2) {
400+
return;
401+
}
402+
399403
rest = record + 2; rest += strspn(rest, strip);
400404

401405
if (record[1] != '=') {
@@ -1763,6 +1767,10 @@ static void parse_descs(sdp_parser_t *p,
17631767
record = next(&message, CRLF, strip)) {
17641768
char field = record[0];
17651769

1770+
if (strlen(record) < 2) {
1771+
return;
1772+
}
1773+
17661774
rest = record + 2; rest += strspn(rest, strip);
17671775

17681776
if (record[1] == '=') switch (field) {

0 commit comments

Comments
 (0)