Osmocom's Base Station Controller for 2G mobile networks
https://osmocom.org/projects/osmobsc
a0735ecab5
In case: * No message_payload and a 0 sm_length was used * esm_class indicates UDH being present * 7bit encoding was requested The code would execute: ud_len = *sms_msg + 1; Which is a NULL pointer dereference and would lead to a crash of the NITB. Enforce the limits of the sm_length parameter and reject the messae otherwise. Fixes: Coverity CID 1042373 |
||
|---|---|---|
| debian | ||
| hlrsync | ||
| linux-kernel | ||
| openbsc | ||
| wireshark | ||
| README | ||