From f769011743feccde0fbca8531ab4e1b3563bf155 Mon Sep 17 00:00:00 2001 From: Daniel-Constantin Mierla Date: Mon, 6 Sep 2021 13:51:32 +0200 Subject: [PATCH] core: parser - ensure content lenght value does not exceed max int --- src/core/parser/parse_content.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/core/parser/parse_content.c b/src/core/parser/parse_content.c index 34cdd40e364..ee56e09b7a7 100644 --- a/src/core/parser/parse_content.c +++ b/src/core/parser/parse_content.c @@ -233,6 +233,10 @@ char* parse_content_length(char* const buffer, const char* const end, size = 0; number = 0; while (p='0' && *p<='9') { + if(number >= INT_MAX/10) { + LM_ERR("content lenght value is too large\n"); + goto error; + } number = number*10 + (*p)-'0'; size ++; p++;