cellular-infrastructure
/
osmo-msc
mirror of https://gerrit.osmocom.org/osmo-msc
9
0
Fork 0
Code Issues Releases Wiki Activity

abis_rsl: fix off-by-one length check when parsing ericson tlli field 

Change-Id: I658f6d82a67944345ddda5534fa996dca9e990ab
This commit is contained in:
Alexander Couzens 2017-03-13 11:00:59 +01:00 committed by Harald Welte
parent 722bbb402f
commit 2faeb1ac6c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openbsc/src/libbsc/abis_rsl.c
View File

@ -2018,7 +2018,7 @@ static int abis_rsl_rx_cchan(struct msgb *msg)
/* FIXME: Replace the messy message parsing below
* with proper TV parser */
LOGP(DRSL, LOGL_INFO, "IMM.ass sent\n");
if(msg->len < 8)
if(msg->len < 9)
LOGP(DRSL, LOGL_ERROR, "short IMM.ass sent message!\n");
else if(msg->data[4] != 0xf1)
LOGP(DRSL, LOGL_ERROR, "unsupported IMM.ass message format! (please fix)\n");