From 68a0d66e77354a9a6aaf641efe381098064bf18d Mon Sep 17 00:00:00 2001 From: Daniel-Constantin Mierla Date: Tue, 30 Aug 2016 16:43:15 +0200 Subject: [PATCH] dialog: proper safety test if cseq value in via is larger than hdr --- modules/dialog/dlg_cseq.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/dialog/dlg_cseq.c b/modules/dialog/dlg_cseq.c index ad915bd3fda..b74cb4ed1f2 100644 --- a/modules/dialog/dlg_cseq.c +++ b/modules/dialog/dlg_cseq.c @@ -291,9 +291,9 @@ int dlg_cseq_msg_received(void *data) } LM_DBG("via cseq cookie [%.*s] val [%.*s]\n", vcseq.len, vcseq.s, vcseq.len-3, vcseq.s+3); - if(vcseq.len-3number.len) { + if(vcseq.len-3>get_cseq(&msg)->number.len) { /* higher lenght to update - wrong */ - LM_DBG("cseq in message (%d) longer than in via (%d)\n", + LM_DBG("cseq in message (%d) shorter than in via (%d)\n", get_cseq(&msg)->number.len, vcseq.len-3); goto done; }