From 69b4b6222edd43a935524e69497c1e7ab1148488 Mon Sep 17 00:00:00 2001
From: Daniel-Constantin Mierla <miconda@gmail.com>
Date: Tue, 7 Jun 2022 09:12:40 +0200
Subject: [PATCH] uac: check new callid value for setting $uac_req() field

- GH #3135

(cherry picked from commit 0eeb4cc61f4a340ef5f8d4acf1d4ea20eb711f73)
---
 src/modules/uac/uac_send.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/modules/uac/uac_send.c b/src/modules/uac/uac_send.c
index be04464cae9..7a43cdcc4df 100644
--- a/src/modules/uac/uac_send.c
+++ b/src/modules/uac/uac_send.c
@@ -424,6 +424,11 @@ int pv_set_uac_req(struct sip_msg* msg, pv_param_t *param,
 				LM_ERR("Invalid value type\n");
 				return -1;
 			}
+			if(tval->rs.len>=128)
+			{
+				LM_ERR("Value size too big\n");
+				return -1;
+			}
 			memcpy(_uac_req.s_callid.s, tval->rs.s, tval->rs.len);
 			_uac_req.s_callid.s[tval->rs.len] = '\0';
 			_uac_req.s_callid.len = tval->rs.len;